Read the docs

Mapsmarker

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Mapsmarker records in CISA KEV

No Mapsmarker vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Leaflet Maps Marker 3 records MEDIUM Leaflet Maps Marker Plugin 1 record LOW

Records

3 records in Leaflet Maps Marker · all components

TI-2022-04275 CVE-2022-4677 · GHSA-xj8j-j953-4q85

Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) < 3.12.7 - Contributor+ Stored XSS via Shortcode

Priority MEDIUM 58

The Leaflet Maps Marker WordPress plugin before 3.12.7 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00562 Published 2023-02-06 Fixed in 3.12.7
TI-2022-01018 CVE-2022-1123 · GHSA-q7xc-mr7x-v3ph

Leaflet Maps Marker < 3.12.5 - Admin+ SQLi

Priority LOW 34

The Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01357 Published 2022-08-29 Fixed in 3.12.5 CWE-89
Open these records in search →