GCVE - cpe:2.3:a:google_maps_easy:google_maps

Approved changes feed: RSS · Atom

cpe:2.3:a:google_maps_easy:google_maps_easy:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Google Maps Easy (`b36ad2cf-1396-5c17-a353-767d89ab8ad9`)
Product	Google Maps Easy (`1d67b2da-869d-5186-8be8-96142cd1a763`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-39346`	vulnerable	2026-06-08 05:33:50.109953	Google Maps Easy <= 1.9.33 Authenticated Stored Cross-Site Scripting MEDIUM (4.8) The Google Maps Easy WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/modules/marker_groups/views/tpl/mgrEditMarkerGroup.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.9.33. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled. Published: 2021-11-01T20:59:29.030Z Updated: 2025-03-31T17:47:24.024Z Open on db.gcve.eu Reference links https://github.com/BigTiger2020/word-press/blob/main/Google%20Maps%20Easy.md https://plugins.trac.wordpress.org/changeset/2620851/google-maps-easy/trunk/modules/marker_groups/views/tpl/mgrEditMarkerGroup.php https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39346	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.