Lucene search
K

27 matches found

Cvelist
Cvelist
added 2025/05/16 3:45 p.m.13 views

CVE-2025-47557 WordPress MapSVG plugin <= 8.5.31 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RomanCode MapSVG mapsvg allows Stored XSS.This issue affects MapSVG: from n/a through = 8.5.31...

6.5CVSS0.00143EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/05/16 3:45 p.m.13 views

CVE-2025-47560 WordPress MapSVG plugin < 8.6.13 - Broken Access Control Vulnerability

Missing Authorization vulnerability in RomanCode MapSVG mapsvg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MapSVG: from n/a through 8.6.13...

5CVSS0.0016EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/05/16 12:0 a.m.1 views

WordPress plugin MapSVG 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5CVSS6.2AI score0.0016EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/05/16 12:0 a.m.2 views

WordPress plugin MapSVG 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

5.3CVSS6.7AI score0.00223EPSS
Exploits0References3
VulnCheck KEV
VulnCheck KEV
added 2024/01/22 12:0 a.m.3 views

VulnCheck KEV: CVE-2022-0592

The MapSVG WordPress plugin before 6.2.20 does not validate and escape a parameter via a REST endpoint before using it in a SQL statement, leading to a SQL Injection exploitable by unauthenticated users...

9.8CVSS7.4AI score0.69874EPSS
Exploits2References1
ATTACKERKB
ATTACKERKB
added 2022/05/09 5:15 p.m.2 views

CVE-2022-0592

The MapSVG WordPress plugin before 6.2.20 does not validate and escape a parameter via a REST endpoint before using it in a SQL statement, leading to a SQL Injection exploitable by unauthenticated users...

9.8CVSS8.1AI score0.69874EPSS
Exploits2References3
OSV
OSV
added 2022/05/09 5:15 p.m.2 views

CVE-2022-0592

The MapSVG WordPress plugin before 6.2.20 does not validate and escape a parameter via a REST endpoint before using it in a SQL statement, leading to a SQL Injection exploitable by unauthenticated users...

9.8CVSS7.4AI score
Exploits0References1
Rows per page
Query Builder