Exploit for MapPress < 2.88.17 - Contributor+ Stored XSS via Map Settings CVE-2023-7225

Name: Exploit for MapPress < 2.88.17 - Contributor+ Stored XSS via Map Settings CVE-2023-7225
Rating: 5 (47 reviews)

2024-01-31 | CVSS 4.9

## https://sploitus.com/exploit?id=WPEX-ID:77101336-ACEE-4C35-8327-64BCD4B14BA9
- Go to Plugin’s page /wp-admin/admin.php?page=mappress_maps
- Add New Map and search any location you want.
- Add XSS Payload on Map Settings on width or height column '><img src onerror=alert(/XSS/)>
- Save Maps
- Copy your created Maps’ shortcode then paste in a new post