Read the docs

Mapsmarker

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Mapsmarker records in CISA KEV

No Mapsmarker vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Leaflet Maps Marker 3 records MEDIUM Leaflet Maps Marker Plugin 1 record LOW

Records

4 records

TI-2022-04275 CVE-2022-4677 · GHSA-xj8j-j953-4q85

Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) < 3.12.7 - Contributor+ Stored XSS via Shortcode

Priority MEDIUM 58

The Leaflet Maps Marker WordPress plugin before 3.12.7 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00562 Published 2023-02-06 Fixed in 3.12.7
TI-2022-01018 CVE-2022-1123 · GHSA-q7xc-mr7x-v3ph

Leaflet Maps Marker < 3.12.5 - Admin+ SQLi

Priority LOW 34

The Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01357 Published 2022-08-29 Fixed in 3.12.5 CWE-89
TI-2012-02527 CVE-2012-2913 · GHSA-qhj9-vw2m-88rp

Multiple cross-site scripting (XSS) vulnerabilities in the Leaflet plugin 0.0.1 for…

Priority LOW 27

Multiple cross-site scripting (XSS) vulnerabilities in the Leaflet plugin 0.0.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) leaflet_layer.php or (2) leaflet_mar…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03757 Published 2012-05-21 No fix listed CWE-79
Open these records in search →