24 matches found
EUVD-2026-123033
Chargemap contains a stored cross site scripting vulnerability. A remote, unauthenticated attacker could craft a payload in the username field of the account registration page and associate the new account with a victim's email. The attacker could send a forgotten password request to the victim,...
EUVD-2026-123032
Chargemap contains an open redirect vulnerability in the authentication login endpoint. A remote, unauthenticated attacker could send a crafted URL to a victim and redirect them to an attacker controlled domain. Fixed 2026-07-17...
EUVD-2026-123031
Chargemap contains a stored cross-site scripting vulnerability that allows a remote, authenticated attacker to craft a malicious payload in the user profile page that executes when another user views the attacker's profile. Fixed 2026-07-17...
CVE-2026-67177
Chargemap contains a stored cross site scripting vulnerability. A remote, unauthenticated attacker could craft a payload in the username field of the account registration page and associate the new account with a victim's email. The attacker could send a forgotten password request to the victim,...
CVE-2026-67176
Chargemap contains an open redirect vulnerability in the authentication login endpoint. A remote, unauthenticated attacker could send a crafted URL to a victim and redirect them to an attacker controlled domain. Fixed 2026-07-17...
CVE-2026-67175
Chargemap contains a stored cross-site scripting vulnerability that allows a remote, authenticated attacker to craft a malicious payload in the user profile page that executes when another user views the attacker's profile. Fixed 2026-07-17...
CVE-2026-67177
Chargemap is vulnerable to a stored cross-site scripting (XSS) vulnerability. A remote, unauthenticated attacker can craft a malicious payload in the username field of the account registration page and associate it with a victim's email. By triggering a forgotten password request , the attacker c...
CVE-2026-67176
Chargemap is affected by an open redirect vulnerability located in the authentication login endpoint . A remote, unauthenticated attacker can exploit this by sending a crafted URL to a victim, resulting in the victim being redirected to an attacker-controlled domain. The vulnerability was address...
CVE-2026-67176 Chargemap open redirect
Chargemap contains an open redirect vulnerability in the authentication login endpoint. A remote, unauthenticated attacker could send a crafted URL to a victim and redirect them to an attacker controlled domain. Fixed 2026-07-17...
CVE-2026-67175
The Chargemap software contains a stored cross-site scripting (XSS) vulnerability. This flaw allows a remote, authenticated attacker to craft and store a malicious payload within a user profile page . When another user views the attacker's profile, the script executes in their browser. This vulne...
CVE-2026-67175 Chargemap stored XSS
Chargemap contains a stored cross-site scripting vulnerability that allows a remote, authenticated attacker to craft a malicious payload in the user profile page that executes when another user views the attacker's profile. Fixed 2026-07-17...
CVE-2026-67176: Chargemap: Chargemap contains an open redirect vulnerability in the authentication login endpoint
Chargemap contains an open redirect vulnerability in the authentication login endpoint. A remote, unauthenticated attacker could send a crafted URL to a victim and redirect them to an attacker controlled domain. Fixed 2026-07-17...
PT-2026-144826
Chargemap contains a stored cross-site scripting vulnerability that allows a remote, authenticated attacker to craft a malicious payload in the user profile page that executes when another user views the attacker's profile. Fixed 2026-07-17...
CVE-2026-67175: Chargemap: Chargemap contains a stored cross-site scripting vulnerability that allows a remote, authenticated attacker to craft a…
Chargemap contains a stored cross-site scripting vulnerability that allows a remote, authenticated attacker to craft a malicious payload in the user profile page that executes when another user views the attacker's profile. Fixed 2026-07-17...
CVE-2026-67177: Chargemap: Chargemap contains a stored cross site scripting vulnerability
Chargemap contains a stored cross site scripting vulnerability. A remote, unauthenticated attacker could craft a payload in the username field of the account registration page and associate the new account with a victim's email. The attacker could send a forgotten password request to the victim,...
PT-2026-144827
Chargemap contains an open redirect vulnerability in the authentication login endpoint. A remote, unauthenticated attacker could send a crafted URL to a victim and redirect them to an attacker controlled domain. Fixed 2026-07-17...
Chargemap security vulnerability
Chargemap is a electric vehicle service platform website operated by the French company Chargemap. Chargemap has a security vulnerability, which stems from the lack of an authentication request limit on the WebSocket API. This vulnerability could lead to denial-of-service attacks or brute-force...
Chargemap security vulnerability
Chargemap is a electric vehicle service platform website operated by the French company Chargemap. Chargemap has a security vulnerability, as the identity verification identifiers of charging stations can be accessed publicly through a web-based mapping platform...
Chargemap Access Control Vulnerability
Chargemap is a electric vehicle service platform website operated by the French company Chargemap. Chargemap has a access control vulnerability, which stems from the lack of an appropriate authentication mechanism. This vulnerability may allow unauthorized sites to simulate operations, escalate...
