title: Store Locator Plus <= 5.5.15 - Unauthenticated Stored Cross-Site Scripting (XSS)
description: There are several endpoints in the Store Locator Plus for WordPress plugin through 5.5.15 that could allow unauthenticated attackers the ability to inject malicious JavaScript into pages.
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: Store Locator Plus for WordPress
vendor: Store Locator Plus®
versions:
lessThanOrEqual: 5.5.15, status: affected, version: 5.5.15, versionType: custom
}