EUVD-2025-132622

Malicious code in teate-thy-sonic-mapa npm...

EUVD-2025-28178

Malicious code in bioql PyPI...

CVE-2025-48259

Cross-Site Request Forgery CSRF vulnerability in Juan Carlos WP Mapa Politico España wp-mapa-politico-spain allows Cross Site Request Forgery.This issue affects WP Mapa Politico España: from n/a through = 3.8.0...

CVE-2025-48259

Cross-Site Request Forgery CSRF vulnerability in Juan Carlos WP Mapa Politico España wp-mapa-politico-spain allows Cross Site Request Forgery.This issue affects WP Mapa Politico España: from n/a through = 3.8.0...

CVE-2025-48259 WordPress WP Mapa Politico España plugin <= 3.8.0 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in Juan Carlos WP Mapa Politico España allows Cross Site Request Forgery. This issue affects WP Mapa Politico España: from n/a through 3.8.0...

WordPress plugin WP Mapa Politico España 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site request forge...

PT-2025-21971 · WordPress · Wp Mapa Politico Espana

Name of the Vulnerable Software and Affected Versions: WP Mapa Politico España versions 3.8.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For WP Mapa Politico...

CVE-2021-24609

The WP Mapa Politico Espana WordPress plugin before 3.7.0 does not sanitise or escape some of its settings before outputting them in attributes, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

Cross site scripting

The WP Mapa Politico Espana WordPress plugin before 3.7.0 does not sanitise or escape some of its settings before outputting them in attributes, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2021-24609

The CVE covers the WP Mapa Politico Espana WordPress plugin before 3.7.0, where certain settings are not sanitized/escaped before output in attributes, allowing authenticated high-privilege users to perform stored XSS. Mitigation: upgrade to version 3.7.0 or later.

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...

WP Mapa Politico Espana < 3.7.0 - Authenticated Stored Cross-Site Scripting

The plugin does not sanitise or escape some of its settings before outputting them in attributes, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed PoC Put the following payload in any of the Maps Zona setting fields such as A Coruna:...

WP Mapa Politico Espana < 3.7.0 - Authenticated Stored Cross-Site Scripting

The plugin does not sanitise or escape some of its settings before outputting them in attributes, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed Put the following payload in any of the Maps Zona setting fields such as A Coruna:...

sremskamitrovica.mapa.in.rs XSS vulnerability

Open Bug Bounty ID: OBB-601910 Description| Value ---|--- Affected Website:| sremskamitrovica.mapa.in.rs Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

niksic.mapa.in.rs XSS vulnerability

Open Bug Bounty ID: OBB-562900 Description| Value ---|--- Affected Website:| niksic.mapa.in.rs Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sigma.cptec.inpe.br XSS vulnerability

Vulnerable URL: http://sigma.cptec.inpe.br/radar/mapa.jsp?i=en=51%22--%3E%3C/script%3E%3Csvg/onload=%27;alert%28/OPENBUGBOUNTY/%29;%27%3E Details: Description| Value ---|--- Patched:| Yes, at 18.06.2017 Latest check for patch:| 18.06.2017 15:06 GMT Vulnerability type:| XSS Vulnerability status:|...

CVE-2014-7359

The MAPA DA MINA aka com.wMAPADAMINA application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7359

The CVE-2014-7359 entry corresponds to the MAPA DA MINA (com.wMAPADAMINA) Android app v0.1, which fails to verify X.509 certificates from SSL servers. The root cause is improper certificate validation, enabling man-in-the-middle attackers to spoof servers and obtain sensitive data via a crafted c...

CVE-2014-7359

The MAPA DA MINA aka com.wMAPADAMINA application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...