VYPR

Mapsvg Lite

by Mapsvg

CVEs (1)

  • CVE-2019-1000003HigFeb 4, 2019
    risk 0.57cvss 8.8epss 0.01

    MapSVG MapSVG Lite version 3.2.3 contains a Cross Site Request Forgery (CSRF) vulnerability in REST endpoint /wp-admin/admin-ajax.php?action=mapsvg_save that can result in an attacker can modify post data, including embedding javascript. This attack appears to be exploitable via…