5.4
CVSSv3

CVE-2022-4676

Published: 30/05/2023 Updated: 07/11/2023
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 0

Vulnerability Summary

The OSM WordPress plugin up to and including 6.01 does not validate and escape some of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

openstreetmap openstreetmap