HexBrain

Ian Dunn · Report #9375

Stored XSS in all fields in Basic Google Maps Placemarks Settings

Validstatus
$25bounty
2upvotes
23 Apr 2014disclosed

How it was found

I am reporting this in general to all fields in Basic Google Maps Placemarks Settings plugin settings.

The plugin settings page input fields: http://www.site.com/wp-admin/options-general.php?page=bgmp_settings are subject to XSS.

Kindly check sir.

Thank yoiu very much.

Clifford Tirog

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original