31 matches found
EUVD-2024-49526
Malicious code in bioql PyPI...
CVE-2025-48293 WordPress Geo Mashup plugin <= 1.13.16 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows PHP Local File Inclusion.This issue affects Geo Mashup: from n/a through = 1.13.16...
CVE-2024-8990
The Geo Mashup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's geomashupvisiblepostslist shortcode in all versions up to, and including, 1.13.13 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-8990
The CVE CVE-2024-8990 concerns the WordPress Geo Mashup plugin. Affected versions are all up to and including 1.13.13, where insufficient input sanitization and output escaping on the geo_mashup_visible_posts_list shortcode allows Stored Cross-Site Scripting (XSS). Exploitation requires authentic...
WordPress Geo Mashup plugin <= 1.13.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via geo_mashup_visible_posts_list Shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via geomashupvisiblepostslist Shortcode vulnerability discovered by Peter Thaleikis in WordPress Plugin Geo Mashup versions = 1.13.13...
WordPress Geo Mashup Plugin <= 1.13.13 is vulnerable to Cross Site Scripting (XSS)
Software Geo Mashup Type Plugin Vulnerable versions = 1.13.13 Fixed in 1.13.14 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8990 Patch priority Low CVSS severity Low 6.5 Developer Dylan Kuhn PSID e149f169bae9 Credits Peter Thaleikis Required...
CVE-2018-14071
The Geo Mashup plugin before 1.10.4 for WordPress has insufficient sanitization of post editor and other user input...
CVE-2015-1383
Cross-site scripting XSS vulnerability in the geo search widget in the Geo Mashup plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the search key...
CVE-2015-1383
CVE-2015-1383 concerns the WordPress Geo Mashup plugin (versions prior to 1.8.3). The vulnerability is a Cross‑Site Scripting (XSS) flaw in the plugin’s geo search widget, where the input from the user’s search key is not properly sanitized, allowing an attacker to inject arbitrary scripts into t...
CVE-2015-1383
Cross-site scripting XSS vulnerability in the geo search widget in the Geo Mashup plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the search key...