CVE-2025-6089 Astun Technology iShare Maps atCheckJS.aspx redirect

A vulnerability has been found in Astun Technology iShare Maps 5.4.0 and classified as problematic. This vulnerability affects unknown code of the file atCheckJS.aspx. The manipulation of the argument ref leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed...

CVE-2025-6089

Astun Technology iShare Maps 5.4.0 is affected by a vulnerability in the file atCheckJS.aspx where manipulating the ref argument causes an open redirect. The issue can be triggered remotely and the exploit has been disclosed publicly. Connected sources confirm the vendor has not responded to disc...

Astun Technology iShare Maps 输入验证错误漏洞

Astun Technology iShare Maps is a software for public map services from Astun Technology, UK. An input validation error vulnerability exists in Astun Technology iShare Maps version 5.4.0, which stems from an open redirect due to incorrect manipulation of the parameter ref in the file atCheckJS.as...

PT-2025-25496

Name of the Vulnerable Software and Affected Versions Astun Technology iShare Maps version 5.4.0 Description A problematic issue has been identified, affecting the file atCheckJS.aspx. The manipulation of the ref argument leads to an open redirect. This issue can be initiated remotely...

CVE-2025-30930

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unreal Themes ACF: Yandex Maps Field acf-yandex-maps-field allows Stored XSS.This issue affects ACF: Yandex Maps Field: from n/a through = 1.1...

CVE-2025-30930

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unreal Themes ACF: Yandex Maps Field acf-yandex-maps-field allows Stored XSS.This issue affects ACF: Yandex Maps Field: from n/a through = 1.1...

CVE-2025-30930

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unreal Themes ACF: Yandex Maps Field acf-yandex-maps-field allows Stored XSS.This issue affects ACF: Yandex Maps Field: from n/a through = 1.1...

CVE-2025-30930 WordPress ACF: Yandex Maps Field plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unreal Themes ACF: Yandex Maps Field acf-yandex-maps-field allows Stored XSS.This issue affects ACF: Yandex Maps Field: from n/a through = 1.1...

CVE-2025-30930 WordPress ACF: Yandex Maps Field plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unreal Themes ACF: Yandex Maps Field acf-yandex-maps-field allows Stored XSS.This issue affects ACF: Yandex Maps Field: from n/a through = 1.1...

CVE-2025-30930

CVE-2025-30930 is a stored XSS in Unreal Themes ACF: Yandex Maps Field. Affected: ACF: Yandex Maps Field versions from n/a up to 1.1. CVSS 3.1 base score 5.9 (Network, Low confidentiality/integrity/availability impact; user interaction required). Exploitation details and a remediated version are ...

WordPress plugin ACF: Yandex Maps Field 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin ACF: A cross-site scripting...

PT-2025-24158 · Unknown · Acf: Yandex Maps Field

Name of the Vulnerable Software and Affected Versions: ACF: Yandex Maps Field versions 1.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in ACF: Yandex Maps Field...

WordPress ACF: Yandex Maps Field plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin ACF: Yandex Maps Field versions = 1.1...

The vulnerability of Apple Maps’ mapping service in macOS operating systems allows a intruder to gain unauthorized access to protected information.

The vulnerability of Apple Maps’ mapping service in macOS operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2025-5378

A vulnerability classified as problematic has been found in Astun Technology iShare Maps 5.4.0. This affects an unknown part of the file mycouncil2.aspx. The manipulation of the argument atTxtStreet leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2025-5377

A vulnerability was found in Astun Technology iShare Maps 5.4.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file historic1.asp. The manipulation of the argument Zoom leads to cross site scripting. The attack may be launched remotely. The exploit...

CVE-2025-5378

A vulnerability classified as problematic has been found in Astun Technology iShare Maps 5.4.0. This affects an unknown part of the file mycouncil2.aspx. The manipulation of the argument atTxtStreet leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2025-5378

A vulnerability classified as problematic has been found in Astun Technology iShare Maps 5.4.0. This affects an unknown part of the file mycouncil2.aspx. The manipulation of the argument atTxtStreet leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2025-5377

A vulnerability was found in Astun Technology iShare Maps 5.4.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file historic1.asp. The manipulation of the argument Zoom leads to cross site scripting. The attack may be launched remotely. The exploit...

CVE-2025-5377

A vulnerability was found in Astun Technology iShare Maps 5.4.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file historic1.asp. The manipulation of the argument Zoom leads to cross site scripting. The attack may be launched remotely. The exploit...