EUVD-2012-2893

Malware in sbrugna...

EUVD-2023-57393

Malicious code in bioql PyPI...

CVE-2025-5122

The Map Block Leaflet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access...

CVE-2012-2913

Multiple cross-site scripting XSS vulnerabilities in the Leaflet plugin 0.0.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 leafletlayer.php or 2 leafletmarker.php, as reachable through wp-admin/admin.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Leaflet plugin 0.0.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 leafletlayer.php or 2 leafletmarker.php, as reachable through wp-admin/admin.php...

CVE-2012-2913

Multiple cross-site scripting XSS vulnerabilities in the Leaflet plugin 0.0.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 leafletlayer.php or 2 leafletmarker.php, as reachable through wp-admin/admin.php...

CVE-2012-2913

The CVE-2012-2913 entry concerns the Leaflet Maps Marker WordPress plugin (version 0.0.1) where unsanitized input in the id parameter (used by leaflet_layer.php and leaflet_marker.php via wp-admin/admin.php) enables cross-site scripting (XSS). Root cause: improper input handling in the id field l...

PT-2012-4359

Name of the Vulnerable Software and Affected Versions Leaflet plugin for WordPress version 0.0.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via the id parameter to specific API endpoints, such as "/leaflet layer.php" or "/leaflet marker.php", which can be...