Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2024-07-02	CVE-2024-5219	Cross-site Scripting vulnerability in Supsystic Easy Google Maps The Easy Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's file upload feature in all versions up to, and including, 1.11.15 due to insufficient input sanitization and output escaping. network low complexity supsystic CWE-79	5.4
2023-06-09	CVE-2023-2526	Unspecified vulnerability in Supsystic Easy Google Maps The Easy Google Maps plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.11.7. network low complexity supsystic	5.4
2022-04-25	CVE-2021-46780	Unspecified vulnerability in Supsystic Easy Google Maps The Easy Google Maps WordPress plugin before 1.9.32 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting network low complexity supsystic	6.1