Threats tagged 'ghsa-hg85-w9x6-p4fq'

The Extensions for Leaflet Map plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in the geojsonmarker shortcode. This affects all versions up to and including 4.7. The flaw arises from insufficient sanitization and escaping of user-supplied attributes, allowing authenticated users with Contributor-level access or higher to inject malicious scripts that execute when other users view the affected pages.