Threats tagged 'ghsa-7vcm-wxx6-q65r'

The Extensions for Leaflet Map plugin for WordPress contains a stored DOM-based cross-site scripting (XSS) vulnerability in all versions up to and including 5.4. This vulnerability arises from insufficient input sanitization and output escaping of the 'feature.properties[<template-token>]' parameter. An unauthenticated attacker can inject malicious scripts that execute when users access affected pages. Exploitation requires prior configuration of a public map using specific shortcode combinations pointing to a GeoJSON source controlled by the attacker, which can be achieved through external data host compromise, subdomain takeover, or intentional pointing to attacker-hosted feeds.