2709 matches found
PT-2025-14581 · WordPress · Mappress Maps
Name of the Vulnerable Software and Affected Versions: MapPress Maps for WordPress versions prior to 2.94.9 Description: The issue concerns the MapPress Maps plugin for WordPress, where certain parameters are not properly sanitized and escaped when displayed on the page. This could allow users wi...
CVE-2025-28858
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arrow Plugins Arrow Maps ap-google-maps allows Reflected XSS.This issue affects Arrow Maps: from n/a through = 1.0.9...
CVE-2025-28858
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arrow Plugins Arrow Maps ap-google-maps allows Reflected XSS.This issue affects Arrow Maps: from n/a through = 1.0.9...
CVE-2025-28858 WordPress Arrow Maps plugin <= 1.0.9 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arrow Plugins Arrow Maps ap-google-maps allows Reflected XSS.This issue affects Arrow Maps: from n/a through = 1.0.9...
CVE-2025-28858 WordPress Arrow Maps plugin <= 1.0.9 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arrow Plugins Arrow Maps ap-google-maps allows Reflected XSS.This issue affects Arrow Maps: from n/a through = 1.0.9...
CVE-2025-28858
Arrow Maps (WordPress plugin Arrow Maps) is affected by CVE-2025-28858: Reflected XSS due to improper neutralization of input during web page generation. Affected versions are described as 'n/a through <= 1.0.9'. The CVSS 3.1 base score is 7.1 (High) with network attack vector, low to low for ...
WordPress plugin Arrow Maps 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
Oops! Google accidentally deletes some users’ Maps Timeline data
Google has admitted it accidentally deleted some users' Google Maps Timeline data after a "technical issue". As reported by Forbes on March 11, users started noticing that their Google Maps Timelines had completely disappeared. At the time, we didn't know anything about the cause of this issue...
WordPress Arrow Maps plugin <= 1.0.9 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Arrow Maps versions = 1.0.9...
CVE-2024-53307
A reflected cross-site scripting XSS vulnerability in the /mw/ endpoint of Evisions MAPS v6.10.2.267 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...
The vulnerability of Apple Maps’ mapping service affects operating systems such as macOS, iOS, iPadOS, and watchOS, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the Apple Maps mapping service in operating systems such as macOS, iOS, iPadOS, and watchOS is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
sysgram.js (>=0.1.3 <=0.1.6), trafimage-maps (>=1.22.9-beta.0 <=1.27.10) +1 more potentially affected by CVE-2025-25977 via canvg (=4.0.1)
canvg NPM version =4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on canvg and may be impacted: - sysgram.js =0.1.3, =1.22.9-beta.0, =1.0.9, =3.0.0 Source cves: CVE-2025-25977 Source advisory: OSV:GHSA-V2MW-5MCH-W8C5...
CVE-2024-53307
A reflected cross-site scripting XSS vulnerability in the /mw/ endpoint of Evisions MAPS v6.10.2.267 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...
CVE-2024-53307
A reflected cross-site scripting XSS vulnerability in the /mw/ endpoint of Evisions MAPS v6.10.2.267 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...
CVE-2024-53307
A reflected cross-site scripting XSS vulnerability in the /mw/ endpoint of Evisions MAPS v6.10.2.267 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...
CVE-2024-53307
A reflected cross-site scripting XSS vulnerability in the /mw/ endpoint of Evisions MAPS v6.10.2.267 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...
CVE-2024-53307
A CVE-2024-53307 vulnerability affects Evisions MAPS v6.10.2.267, with a reflected XSS in the /mw/ endpoint that could cause arbitrary code execution in a user’s browser when a crafted payload is injected. The CVSS 3.1 baseline is 5.4 (Medium), with Network attack vector, Low attack complexity, P...
Evisions MAPS 跨站脚本漏洞
Evisions MAPS is a web-based application server from Evisions, Inc. A cross-site scripting vulnerability exists in Evisions MAPS version v6.10.2.267, which stems from the presence of reflective cross-site scripting in the /mw/ endpoint, which could lead to an attacker executing arbitrary code in ...
CVE-2024-13781
The Hero Maps Premium plugin for WordPress is vulnerable to SQL Injection via several AJAX actions in all versions up to, and including, 2.3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
CVE-2024-13781
The Hero Maps Premium plugin for WordPress is vulnerable to SQL Injection via several AJAX actions in all versions up to, and including, 2.3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...