CVE-2018-14071

EUVD-2018-5993
The Geo Mashup plugin before 1.10.4 for WordPress has insufficient sanitization of post editor and other user input.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 80%
Affected Products (NVD)
VendorProductVersion
cyberhobogeo_mashup
𝑥
< 1.10.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/cyberhobo/wordpress-geo-mashup/blob/master/readme.txt
https://github.com/cyberhobo/wordpress-geo-mashup/commit/838e2fe15a2328f5ae3dfc75d90e420509286f2f
https://github.com/cyberhobo/wordpress-geo-mashup/issues/817
https://github.com/cyberhobo/wordpress-geo-mashup/blob/master/readme.txt
https://github.com/cyberhobo/wordpress-geo-mashup/commit/838e2fe15a2328f5ae3dfc75d90e420509286f2f
https://github.com/cyberhobo/wordpress-geo-mashup/issues/817