Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:jsp_store_locator:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductJsp Store Locator (b96bca49-0388-53e3-b532-bdc132038d4f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12301 vulnerable 2026-06-08 06:23:51.689025 JSP Store Locator <= 1.0 - Deletion via Missing CSRF
The JSP Store Locator WordPress plugin through 1.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks.
Published: 2025-05-15T20:06:52.758Z
Updated: 2025-05-20T19:33:00.155Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11267 vulnerable 2026-06-08 06:23:49.258344 JSP Store Locator <= 1.0 - Contributor+ SQL Injection
The JSP Store Locator WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing user with Contributor to perform SQL injection attacks.
Published: 2025-05-15T20:06:48.708Z
Updated: 2025-05-20T19:34:46.725Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.