Joomlaserviceprovider Jsp_store_locator
2 CVEs affecting Joomlaserviceprovider Jsp_store_locator. Latest disclosed: 2025-05-15. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-11267 | High | 8.8 | 2025-05-15 | The JSP Store Locator WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing user with Contributor… |
CVE-2024-12301 | Medium | 6.5 | 2025-05-15 | The JSP Store Locator WordPress plugin through 1.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwant… |