CVE-2024-4663

MediumCVSS 6.4/10Last modified Jun 17, 2026

Description

The OSM Map Widget for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

Metrics

CVSS 3.1 6.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jun 19, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-466324.3Assimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function.CVE-2024-466355.9An issue in the API endpoint /AccountMaster/GetCurrentUserInfo of INROAD before v202402060 allows attackers to access sensitive information CVE-2024-466369.4NASA Earth Observing System Data and Information System (EOSDIS) MODAPS v8.1 was discovered to contain a SQL injection vulnerability in the CVE-2024-466397.6A cross-site scripting (XSS) vulnerability in HelpDeskZ v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payloCVE-2024-46644.8The WP Chat App WordPress plugin before 3.6.5 does not sanitise and escape some of its settings, which could allow high privilege users suchCVE-2024-466409.8SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the checkCVE-2024-466446.5eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via edit_file.CVE-2024-466457.5eNMS 4.0.0 is vulnerable to Directory Traversal via get_tree_files.CVE-2024-466466.5eNMS up to 4.7.1 is vulnerable to Directory Traversal via /download/file.CVE-2024-466476.5eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via upload_files.CVE-2024-466487.5eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via scan_folder.CVE-2024-466497.5eNMS up to 4.7.1 is vulnerable to Directory Traversal via download/folder.