WordPress Mihdan: Elementor Yandex Maps plugin <= 1.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Marker Pins vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Marker Pins vulnerability discovered by zer0gh0st in WordPress Plugin Mihdan: Elementor Yandex Maps versions = 1.6.11...

PT-2025-39942

Name of the Vulnerable Software and Affected Versions Mihdan: Elementor Yandex Maps plugin for WordPress versions through 1.6.11 Description The Mihdan: Elementor Yandex Maps plugin for WordPress is susceptible to Stored Cross-Site Scripting through the plugin’s block attributes. This is due to...

WordPress plugin Mihdan Elementor Yandex Maps 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers. timesheet is a job tracking plugin used in it. relevant is a...

CVE-2025-48352

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sitesearch-yandex Yandex Site search pinger yandex-pinger allows Stored XSS.This issue affects Yandex Site search pinger: from n/a through = 1.5...

CVE-2025-48352

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sitesearch-yandex Yandex Site search pinger yandex-pinger allows Stored XSS.This issue affects Yandex Site search pinger: from n/a through = 1.5...

CVE-2025-48352

CVE-2025-48352 describes a stored cross-site scripting (XSS) vulnerability in the WordPress plugin “Яндекс.ПДС Пингер / Yandex Site search pinger” (sitesearch-yandex) up to version 1.5, caused by improper neutralization of input during web page generation. The issue allows stored XSS. Public deta...

CVE-2025-48352 WordPress Yandex Site search pinger plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sitesearch-yandex Yandex Site search pinger allows Stored XSS. This issue affects Yandex Site search pinger: from n/a through 1.5...

CVE-2025-48352 WordPress Yandex Site search pinger plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sitesearch-yandex Yandex Site search pinger yandex-pinger allows Stored XSS.This issue affects Yandex Site search pinger: from n/a through = 1.5...

WordPress plugin Yandex Site search pinger 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress Yandex Site search pinger plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan Patchstack Alliance in WordPress Plugin Yandex Site search pinger versions = 1.5...

Malicious code in yandex-logger (npm)

The package yandex-logger was found to contain malicious code...

Malicious code in yandex-app-config (npm)

The package yandex-app-config was found to contain malicious code...

Malicious code in yandex-config (npm)

The package yandex-config was found to contain malicious code...

Malicious code in yandex-geo-utils (npm)

The package yandex-geo-utils was found to contain malicious code...

MAL-2025-40212 Malicious code in yandex-clck-url (npm)

The package yandex-clck-url was found to contain malicious code...

MAL-2025-40216 Malicious code in yandex-lint-draft (npm)

The package yandex-lint-draft was found to contain malicious code...

MAL-2025-40215 Malicious code in yandex-geo-utils (npm)

The package yandex-geo-utils was found to contain malicious code...

MAL-2025-40219 Malicious code in yandex-printf (npm)

The package yandex-printf was found to contain malicious code...

Malicious code in yandex-lint-draft (npm)

The package yandex-lint-draft was found to contain malicious code...

Malicious code in yandex-printf (npm)

The package yandex-printf was found to contain malicious code...