Vulnerabilities > Webdesi9 > Custom MAP > 1.0.1

DATE CVE VULNERABILITY TITLE RISK
2017-12-19 CVE-2017-17744 Cross-site Scripting vulnerability in Webdesi9 Custom MAP 1.0/1.0.1/1.1
A cross-site scripting (XSS) vulnerability in the custom-map plugin through 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map_id parameter to view/advancedsettings.php.
network
webdesi9 CWE-79
4.3