{ "canonical_id": "wordpress--dc4426e2f6", "system_id": "wordpress", "display_name": "WordPress", "category": "cms", "advisory_mode": "plugin", "title": "WP Go Maps <= 10.0.05 Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via admin_post_wpgmza_save_settings vulnerability", "summary": "", "published_at": null, "updated_at": null, "severity": "unknown", "cvss_score": null, "exploit_status": "unknown", "source_confidence": "ecosystem-authority", "official_source_url": "https://patchstack.com/database/wordpress/plugin/wp-google-maps/vulnerability/wordpress-wp-go-maps-formerly-wp-google-maps-plugin-10-0-05-missing-authorization-to-authenticated-subscriber-stored-cross-site-scripting-via-admin-post-wpgmza-save-settings-vulnerability", "secondary_source_urls": [], "aliases": [], "cve_ids": [], "ghsa_ids": [], "osv_ids": [], "affected_versions": [], "fixed_versions": [], "package_name": null, "render_markdown": false, "case_path": null, "secure_code_topics": [ "plugin-extension-trust-policy", "xss-output-encoding", "file-upload-validation", "token-cookie-storage" ], "status": "triage", "triage_reasons": [ "missing affected/fixed version details" ], "verification_status": "triage-manual", "verification_mode": "synthetic", "last_verified_at": null, "last_run_id": null, "evidence_bundle": null, "historical_status": null, "latest_status": null, "browser_evidence": { "required": false, "present": false, "refs": [] }, "repro_profile_id": "xss-generic", "artifact_mode": "official-image", "blocked_reason": null, "metadata": { "source_names": [ "Patchstack Database" ], "source_kinds": [ "html-links" ], "candidate_count": 1 } }