CVE-2021-24383

WP Go Maps versions prior to 8.1.12 contain a stored cross-site scripting vulnerability where the Map Name field is not properly sanitized, validated, or escaped before being displayed in the map list on the WordPress admin dashboard. An authenticated attacker could exploit this flaw by injecting malicious scripts through the Map Name parameter, which would then execute in the browsers of other administrators viewing the map list.

Based on public CVE data (MITRE/NVD).