Known CVE

WordPress Plugin MapPress <2.73.4 - Cross-Site Scripting

WordPress Plugin MapPress before version 2.73.4 does not sanitize and escape the 'mapid' parameter before outputting it back in the "Bad mapid" error message, leading to reflected cross-site scripting.

CVE-2022-0208

Medium2022CVSS 6.1CWE-79

cve2022 · mappress · xss · wordpress · wp-plugin · wpscan · mappresspro · vuln

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website