CVE-2025-62942 WordPress WP Mapbox GL JS Maps plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tempranova WP Mapbox GL JS Maps wp-mapbox-gl-js allows Stored XSS.This issue affects WP Mapbox GL JS Maps: from n/a through = 3.0.1...

CVE-2025-62942 WordPress WP Mapbox GL JS Maps plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tempranova WP Mapbox GL JS Maps wp-mapbox-gl-js allows Stored XSS.This issue affects WP Mapbox GL JS Maps: from n/a through = 3.0.1...

CVE-2025-62942

CVE-2025-62942 is a stored XSS in WP Mapbox GL JS Maps (Tempranova) affecting versions

CVE-2025-62942: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tempranova WP Mapbox GL JS Maps wp-mapbox-gl-js allows Stored XSS.This issue affects WP Mapbox GL JS Maps: from n/a through = 3.0.1...

PT-2025-43818

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tempranova WP Mapbox GL JS Maps wp-mapbox-gl-js allows Stored XSS.This issue affects WP Mapbox GL JS Maps: from n/a through = 3.0.1...

WordPress plugin WP Mapbox GL JS Maps 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... A cross-site...

WordPress WP Mapbox GL JS Maps plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin WP Mapbox GL JS Maps versions = 3.0.1...

Malicious Package

Overview mapbox-gl-ts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in mapbox-gl-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d036b317c8c49cc8982dedb6417e57b1669e9dfc07159bf4a7e6fb136ff939c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-32637

Malicious code in mapbox-gl-ts npm...

MAL-2025-47998 Malicious code in mapbox-gl-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d036b317c8c49cc8982dedb6417e57b1669e9dfc07159bf4a7e6fb136ff939c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2022-6476

Malicious code in bioql PyPI...

EUVD-2025-2983

Malicious code in bioql PyPI...

Malicious code in mapbox-streets-source (npm)

The package mapbox-streets-source was found to contain malicious code...

Malicious code in mapbox-studio (npm)

The package mapbox-studio was found to contain malicious code...

MAL-2025-25912 Malicious code in mapbox-studio (npm)

The package mapbox-studio was found to contain malicious code...

MAL-2025-25911 Malicious code in mapbox-streets-source (npm)

The package mapbox-streets-source was found to contain malicious code...

Malicious code in mapbox-gl-js-toys (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6844 Malicious code in mapbox-gl-js-toys (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in mapbox-gl-js (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ada891fdc8acdf8af20afcf9782848cf7cf035176b623fdf8c82a3b046d43005 Any computer that has this package installed or running should be considered...