CVE-2022-4790 — WP Google My Business Auto Publish < 3.4 - Contributor+ Stored XSS via Shortcode

CVE-2022-4790

WP Google My Business Auto Publish < 3.4 - Contributor+ Stored XSS via Shortcode PUBLISHED

Description (CNA)

The WP Google My Business Auto Publish WordPress plugin before 3.4 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

Affected (CNA)

Vendor / product	Versions
Unknown / WP Google My Business Auto Publish	affected 0 before 3.4

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/c01f9d36-955d-432c-8a09-ea9ee750f1a1

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/c01f9d36-955d-432c-8a09-ea9ee750f1a1

CISA-ADP

No English description supplied.

No references supplied.