Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Mapsmarker Clear all filters
TI-2022-04275 CVE-2022-4677 · GHSA-xj8j-j953-4q85

Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) < 3.12.7 - Contributor+ Stored XSS via Shortcode

Priority MEDIUM 58

The Leaflet Maps Marker WordPress plugin before 3.12.7 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00562 Published 2023-02-06 Fixed in 3.12.7
TI-2022-01018 CVE-2022-1123 · GHSA-q7xc-mr7x-v3ph

Leaflet Maps Marker < 3.12.5 - Admin+ SQLi

Priority LOW 34

The Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01357 Published 2022-08-29 Fixed in 3.12.5 CWE-89
TI-2012-02527 CVE-2012-2913 · GHSA-qhj9-vw2m-88rp

Multiple cross-site scripting (XSS) vulnerabilities in the Leaflet plugin 0.0.1 for…

Priority LOW 27

Multiple cross-site scripting (XSS) vulnerabilities in the Leaflet plugin 0.0.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) leaflet_layer.php or (2) leaflet_mar…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03757 Published 2012-05-21 No fix listed CWE-79