Lucene search
+L

13 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:16 p.m.•17 views

CVE-2026-42734

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.This issue affects Geo Mashup: from n/a through = 1.13.19...

7.1CVSS5.4AI score0.00251EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•20 views

PT-2026-43646

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.This issue affects Geo Mashup: from n/a through = 1.13.19...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•2 views

CVE-2026-42734: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.This issue affects Geo Mashup: from n/a through = 1.13.19...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/26 8:19 a.m.•34 views

EUVD-2026-31804

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dylan Kuhn Geo Mashup allows Stored XSS. This issue affects Geo Mashup: from n/a through 1.13.18...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/26 12:00 a.m.•3 views

CVE-2026-27427: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dylan Kuhn Geo Mashup allows Stored XSS. This issue affects Geo Mashup: from n/a through 1.13.18...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/16 11:25 a.m.•15 views

CVE-2025-48293

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows PHP Local File Inclusion.This issue affects Geo Mashup: from n/a through = 1.13.16...

9.8CVSS5.9AI score0.00435EPSS
SaveExploits0References1
CVE
CVE
•added 2024/09/17 11:03 p.m.•68 views

CVE-2024-44008

CVE-2024-44008 affects the WordPress Geo Mashup plugin up to version 1.13.12. It is a Stored XSS caused by improper neutralization of input during web page generation. Exploitation would require a Contributor-level privilege; patch status indicates the issue is fixed in 1.13.13. Patchstack notes ...

6.5CVSS5.9AI score0.00313EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/09/17 11:03 p.m.•24 views

CVE-2024-44008 WordPress Geo Mashup plugin <= 1.13.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Stored XSS.This issue affects Geo Mashup: from n/a through = 1.13.12...

6.5CVSS5.2AI score0.00313EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/17 11:03 p.m.•19 views

CVE-2024-44008 WordPress Geo Mashup plugin <= 1.13.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Stored XSS.This issue affects Geo Mashup: from n/a through = 1.13.12...

6.5CVSS5.9AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/09/17 12:00 a.m.•6 views

PT-2024-30873

Name of the Vulnerable Software and Affected Versions Dylan Kuhn Geo Mashup versions n/a through 1.13.12 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations For...

6.5CVSS5.7AI score0.00313EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/17 12:00 a.m.•2 views

CVE-2024-44008: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Stored XSS.This issue affects Geo Mashup: from n/a through = 1.13.12...

6.5CVSS5.8AI score0.00313EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/09/16 12:00 a.m.•23 views

WordPress Geo Mashup Plugin <= 1.13.12 is vulnerable to Cross Site Scripting (XSS)

Software Geo Mashup Type Plugin Vulnerable versions = 1.13.12 Fixed in 1.13.13 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-44008 Patch priority Low CVSS severity Low 6.5 Developer Dylan Kuhn PSID d830e975a22f Credits LVT-tholv2k Required privilege Contributor...

6.5CVSS6.6AI score0.00313EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2023/07/18 12:00 a.m.•12 views

WordPress Geo Mashup Plugin < 1.13.12 is vulnerable to Cross Site Scripting (XSS)

Software Geo Mashup Type Plugin Vulnerable versions 1.13.12 Fixed in 1.13.12 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Dylan Kuhn PSID 0cbe2859392c Credits Rafie Muhammad Patchstack Required...

6.8AI score0.00272EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder