Vulnerabilities > CVE-2021-24467 - Unspecified vulnerability in Leaflet MAP Project Leaflet MAP

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

leaflet-map-project

NVD

Published: 2021-08-09

Updated: 2024-11-21

Summary

The Leaflet Map WordPress plugin before 3.0.0 does not verify the CSRF nonce when saving its settings, which allows attackers to make a logged in admin update the settings via a Cross-Site Request Forgery attack. This could lead to Cross-Site Scripting issues by either changing the URL of the JavaScript library being used, or using malicious attributions which will be executed in all page with an embed map from the plugin

Vulnerable Configurations

Part	Description	Count
Application	Leaflet_Map_Project Leaflet MAP Project Leaflet MAP 1.0 Leaflet MAP Project Leaflet MAP 1.1 Leaflet MAP Project Leaflet MAP 1.2 Leaflet MAP Project Leaflet MAP 1.3 Leaflet MAP Project Leaflet MAP 1.4 Leaflet MAP Project Leaflet MAP 1.5 Leaflet MAP Project Leaflet MAP 1.6 Leaflet MAP Project Leaflet MAP 1.7 Leaflet MAP Project Leaflet MAP 1.8 Leaflet MAP Project Leaflet MAP 1.9 Leaflet MAP Project Leaflet MAP 1.10 Leaflet MAP Project Leaflet MAP 1.11 Leaflet MAP Project Leaflet MAP 1.12 Leaflet MAP Project Leaflet MAP 1.13 Leaflet MAP Project Leaflet MAP 1.14 Leaflet MAP Project Leaflet MAP 1.15 Leaflet MAP Project Leaflet MAP 1.16 Leaflet MAP Project Leaflet MAP 2.0 Leaflet MAP Project Leaflet MAP 2.0.1 Leaflet MAP Project Leaflet MAP 2.0.2 Leaflet MAP Project Leaflet MAP 2.1.0 Leaflet MAP Project Leaflet MAP 2.2.0 Leaflet MAP Project Leaflet MAP 2.3.0 Leaflet MAP Project Leaflet MAP 2.4.0 Leaflet MAP Project Leaflet MAP 2.5.0 Leaflet MAP Project Leaflet MAP 2.6.0 Leaflet MAP Project Leaflet MAP 2.7.0 Leaflet MAP Project Leaflet MAP 2.7.1 Leaflet MAP Project Leaflet MAP 2.7.2 Leaflet MAP Project Leaflet MAP 2.7.3 Leaflet MAP Project Leaflet MAP 2.7.4 Leaflet MAP Project Leaflet MAP 2.7.5 Leaflet MAP Project Leaflet MAP 2.7.6 Leaflet MAP Project Leaflet MAP 2.7.7 Leaflet MAP Project Leaflet MAP 2.7.8 Leaflet MAP Project Leaflet MAP 2.8.0 Leaflet MAP Project Leaflet MAP 2.8.1 Leaflet MAP Project Leaflet MAP 2.8.2 Leaflet MAP Project Leaflet MAP 2.8.3 Leaflet MAP Project Leaflet MAP 2.8.4 Leaflet MAP Project Leaflet MAP 2.8.5 Leaflet MAP Project Leaflet MAP 2.8.6 Leaflet MAP Project Leaflet MAP 2.9.1 Leaflet MAP Project Leaflet MAP 2.10.0 Leaflet MAP Project Leaflet MAP 2.10.1 Leaflet MAP Project Leaflet MAP 2.11.0 Leaflet MAP Project Leaflet MAP 2.11.1 Leaflet MAP Project Leaflet MAP 2.11.2 Leaflet MAP Project Leaflet MAP 2.11.3 Leaflet MAP Project Leaflet MAP 2.11.4 Leaflet MAP Project Leaflet MAP 2.11.5 Leaflet MAP Project Leaflet MAP 2.12.0 Leaflet MAP Project Leaflet MAP 2.13.0 Leaflet MAP Project Leaflet MAP 2.14.0 Leaflet MAP Project Leaflet MAP 2.15.0 Leaflet MAP Project Leaflet MAP 2.16.0 Leaflet MAP Project Leaflet MAP 2.16.1 Leaflet MAP Project Leaflet MAP 2.17.0 Leaflet MAP Project Leaflet MAP 2.17.1 Leaflet MAP Project Leaflet MAP 2.17.2 Leaflet MAP Project Leaflet MAP 2.17.3 Leaflet MAP Project Leaflet MAP 2.18.0 Leaflet MAP Project Leaflet MAP 2.19.0 Leaflet MAP Project Leaflet MAP 2.19.1 Leaflet MAP Project Leaflet MAP 2.20.0 Leaflet MAP Project Leaflet MAP 2.21.0 Leaflet MAP Project Leaflet MAP 2.22.0 Leaflet MAP Project Leaflet MAP 2.22.1 Leaflet MAP Project Leaflet MAP 2.23.0 Leaflet MAP Project Leaflet MAP 2.23.1 Leaflet MAP Project Leaflet MAP 2.23.2 Leaflet MAP Project Leaflet MAP 2.23.3	72

Summary

Vulnerable Configurations

References