Lucene search
+L

249 matches found

RedhatCVE
RedhatCVE
•added 2025/11/05 5:08 a.m.•16 views

CVE-2025-12369

The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the geojsonmarker shortcode in all versions up to, and including, 4.7. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for...

6.4CVSS5AI score0.00223EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/04 5:16 a.m.•16 views

CVE-2025-12369

The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the geojsonmarker shortcode in all versions up to, and including, 4.7. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for...

6.4CVSS0.00223EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2025/11/04 4:56 a.m.•22 views

WordPress Extensions for Leaflet Map plugin <= 4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin Extensions for Leaflet Map versions = 4.7...

6.4CVSS5.7AI score0.00223EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/11/04 4:27 a.m.•25 views

CVE-2025-12369 Extensions for Leaflet Map <= 4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the geojsonmarker shortcode in all versions up to, and including, 4.7. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for...

6.4CVSS0.00223EPSS
SaveExploits0References4
CVE
CVE
•added 2025/11/04 4:27 a.m.•36 views

CVE-2025-12369

The CVE-2025-12369 entry concerns WordPress plugin Extensions for Leaflet Map (

6.4CVSS6.1AI score0.00223EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/11/04 4:27 a.m.•11 views

CVE-2025-12369 Extensions for Leaflet Map <= 4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the geojsonmarker shortcode in all versions up to, and including, 4.7. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for...

6.4CVSS6.1AI score0.00223EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/11/04 12:00 a.m.•17 views

PT-2025-44948

The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the geojsonmarker shortcode in all versions up to, and including, 4.7. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for...

6.4CVSS5AI score0.00223EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•18 views

WordPress plugin Extensions for Leaflet Map 跨站脚本漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin Extensions for Leaflet Map suffers from a cross-site scripting vulnerability...

6.4CVSS5.7AI score0.00223EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/04 12:00 a.m.•6 views

CVE-2025-12369: Improper Neutralization of Input During Web Page Generation

The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the geojsonmarker shortcode in all versions up to, and including, 4.7. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for...

6.4CVSS6AI score0.00223EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2012-2893

Malware in sbrugna...

4.3CVSS6.4AI score0.03757EPSS
SaveExploits3References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2021-11379

Malware in sbrugna...

6.5CVSS6.5AI score0.0056EPSS
SaveExploits2References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2024-32245

Malicious code in bioql PyPI...

6.4CVSS6.5AI score0.00435EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-5599

Malicious code in bioql PyPI...

7.1CVSS9.2AI score0.00242EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2023-35403

Malicious code in bioql PyPI...

7.1CVSS7AI score0.00382EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2023-57393

Malicious code in bioql PyPI...

6.4CVSS6.2AI score0.00486EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2022-52001

Malicious code in bioql PyPI...

5.4CVSS5.6AI score0.00562EPSS
SaveExploits2References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2024-37620

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00261EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2022-24466

Malicious code in bioql PyPI...

7.2CVSS7AI score0.01328EPSS
SaveExploits2References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•8 views

Malicious code in loclys-leaflet-routing-machine (npm)

The package loclys-leaflet-routing-machine was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•7 views

MAL-2025-25498 Malicious code in loclys-leaflet-routing-machine (npm)

The package loclys-leaflet-routing-machine was found to contain malicious code...

7.2AI score
SaveExploits0
Rows per page
Query Builder