CVE-2025-3737

The Drupal Google Maps: Store Locator module is affected by an Authenticated Other Vulnerability Type vulnerability. While specific root cause details are not provided in the documents, the issue is significant enough that the Drupal security team has marked the project as unsupported due to a kn...

Drupal Google Maps 安全漏洞

Drupal Google Maps is a mapping tool for the Drupal community. A security vulnerability exists in Drupal Google Maps. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...

Drupal Google Maps: Store Locator module * - Authenticated Other Vulnerability Type vulnerability

Authenticated Other Vulnerability Type vulnerability discovered by Drupal Security Site in WordPress Module Google Maps: Store Locator versions...

PT-2025-16801 · Google · Google Maps: Store Locator

Name of the Vulnerable Software and Affected Versions: Google Maps: Store Locator versions . Description: The issue is related to a problem in the Google Maps: Store Locator module for Drupal. Recommendations: For Google Maps: Store Locator versions ., update to a version that includes the fix fo...

CVE-2025-3737: Undefined Security Weakness

Vulnerability in Drupal Google Maps: Store Locator.This issue affects Google Maps: Store Locator:...

Google Maps: Store Locator - Critical - Unsupported - SA-CONTRIB-2025-038

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

CVE-2025-32525

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MapGeo Interactive Geo Maps interactive-geo-maps allows Reflected XSS.This issue affects Interactive Geo Maps: from n/a through = 1.6.24...

CVE-2025-32525

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MapGeo Interactive Geo Maps interactive-geo-maps allows Reflected XSS.This issue affects Interactive Geo Maps: from n/a through = 1.6.24...

CVE-2025-32525

CVE-2025-32525 is a reflected XSS affecting Interactive Geo Maps plugin for WordPress (affected until 1.6.24). The CVSS v3.1 base score is 7.1 (HIGH); attack vector NETWORK, complexity LOW, privileges NONE, user interaction REQUIRED, and impact is LOW/LOW/LOW for confidentiality, integrity, avail...

PT-2025-16058

Name of the Vulnerable Software and Affected Versions: Interactive Geo Maps versions 1.6.24 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting XSS. This means that an attacker can inject...

WordPress plugin Interactive Geo Maps 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

CVE-2025-32525: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MapGeo Interactive Geo Maps interactive-geo-maps allows Reflected XSS.This issue affects Interactive Geo Maps: from n/a through = 1.6.24...

CVE-2025-32683: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows DOM-Based XSS.This issue affects MapSVG: from n/a through = 8.6.6...

CVE-2025-32684: Missing Authorization

Missing Authorization vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MapSVG: from n/a through = 8.6.4...

CVE-2025-32179

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in icopydoc Maps for WP maps-for-wp allows Stored XSS.This issue affects Maps for WP: from n/a through = 1.2.4...

CVE-2025-32138

Improper Restriction of XML External Entity Reference vulnerability in supsystic Easy Google Maps google-maps-easy allows XML Injection.This issue affects Easy Google Maps: from n/a through = 1.11.18...

CVE-2025-2279

The Maps WordPress plugin through 1.0.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2025-2055

The MapPress Maps for WordPress plugin before 2.94.9 does not sanitise and escape some parameters when outputing them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

CVE-2025-32179

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in icopydoc Maps for WP maps-for-wp allows Stored XSS.This issue affects Maps for WP: from n/a through = 1.2.4...

CVE-2025-32138

Improper Restriction of XML External Entity Reference vulnerability in supsystic Easy Google Maps google-maps-easy allows XML Injection.This issue affects Easy Google Maps: from n/a through = 1.11.18...