CVE-2023-4887

Summary

CVE-2023-4887 is a Stored Cross-Site Scripting (XSS) vulnerability affecting the Google Maps Plugin by Intergeo for WordPress. This issue, present in versions up to 2.3.2, allows authenticated attackers with contributor-level access and above to inject malicious scripts. The vulnerability stems from insufficient input sanitization and output escaping on user-supplied attributes within the 'intergeo' shortcode. As a result, any page containing this shortcode becomes a threat, executing the injected scripts whenever a user accesses the page.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.