CVE-2025-5378 Astun Technology iShare Maps mycouncil2.aspx cross site scripting

A vulnerability classified as problematic has been found in Astun Technology iShare Maps 5.4.0. This affects an unknown part of the file mycouncil2.aspx. The manipulation of the argument atTxtStreet leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2025-5378

CVE-2025-5378 affects Astun Technology iShare Maps 5.4.0, specifically the mycouncil2.aspx component where the atTxtStreet parameter can be manipulated, triggering cross-site scripting. The vulnerability is exploitable remotely and public exploits have been disclosed. Multiple connected sources c...

CVE-2025-5377 Astun Technology iShare Maps historic1.asp cross site scripting

A vulnerability was found in Astun Technology iShare Maps 5.4.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file historic1.asp. The manipulation of the argument Zoom leads to cross site scripting. The attack may be launched remotely. The exploit...

CVE-2025-5377 Astun Technology iShare Maps historic1.asp cross site scripting

A vulnerability was found in Astun Technology iShare Maps 5.4.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file historic1.asp. The manipulation of the argument Zoom leads to cross site scripting. The attack may be launched remotely. The exploit...

CVE-2025-5377

CVE-2025-5377 affects Astun Technology iShare Maps 5.4.0. The issue is a cross-site scripting vulnerability in historic1.asp caused by improper handling of the Zoom parameter, which can be triggered remotely. Multiple connected sources confirm the vulnerability and public disclosure of the exploi...

PT-2025-23403

Name of the Vulnerable Software and Affected Versions Astun Technology iShare Maps version 5.4.0 Description A problematic vulnerability has been found in Astun Technology iShare Maps, affecting an unknown part of the file mycouncil2.aspx. The manipulation of the atTxtStreet argument leads to...

Astun Technology iShare Maps 代码注入漏洞

Astun Technology iShare Maps is a software for public map services from Astun Technology, UK. A code injection vulnerability exists in Astun Technology iShare Maps version 5.4.0, which originates from a cross-site scripting attack due to an incorrect manipulation of the parameter Zoom in the file...

Astun Technology iShare Maps 代码注入漏洞

Astun Technology iShare Maps is a software for public map services from Astun Technology, UK. A code injection vulnerability exists in Astun Technology iShare Maps version 5.4.0, which originates from a cross-site scripting attack due to an incorrect manipulation of the parameter atTxtStreet in t...

PT-2025-23402

Name of the Vulnerable Software and Affected Versions Astun Technology iShare Maps version 5.4.0 Description A issue was found in the file historic1.asp, where the manipulation of the Zoom argument leads to cross site scripting. This can be exploited remotely. The vendor was contacted about this...

CVE-2025-4944

CVE-2025-4944 covers the LA-Studio Element Kit for Elementor WordPress plugin. It is vulnerable to stored XSS in all versions up to 1.5.2 via Image Compare and Google Maps widgets due to insufficient input sanitization and output escaping on user-supplied attributes. The vulnerability allows auth...

Head Start 安全漏洞

Head Start is a web-based knowledge mapping software open-sourced by Open Knowledge Maps. It is designed to give researchers a head start in literature review hence the name. A security vulnerability exists in the v7 version of Head Start that stems from improper handling of the url parameter in...

On the Intractability of Chaotic Symbolic Walks: toward a Non-Algebraic Post-Quantum Hardness Assumption

Most classical and post-quantum cryptographic assumptions, including integer factorization, discrete logarithms, and Learning with Errors LWE, rely on algebraic structures such as rings or vector spaces. While mathematically powerful, these structures can be exploited by quantum algorithms or...

CVE-2025-22329

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Agile Logix Free Google Maps wp-map allows Stored XSS.This issue affects Free Google Maps: from n/a through = 1.0.1...

CVE-2025-24742

Cross-Site Request Forgery CSRF vulnerability in WPGMaps WP Go Maps wp-google-maps.This issue affects WP Go Maps: from n/a through = 9.0.40...

CVE-2025-23935

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fengler Magic Google Maps magic-google-maps allows Stored XSS.This issue affects Magic Google Maps: from n/a through = 1.0.4...

CVE-2024-9028

The WP GPX Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sgpx' shortcode in all versions up to, and including, 1.7.08 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-27257

IBM OpenPages 8.3 and 9.0 potentially exposes information about client-side source code through use of JavaScript source maps to unauthorized users...

CVE-2024-31269

Cross-Site Request Forgery CSRF vulnerability in Supsystic Easy Google Maps.This issue affects Easy Google Maps: from n/a through 1.11.11...

CVE-2024-1582

The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpgmza' shortcode in all versions up to, and including, 9.0.32 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...

CVE-2024-21744

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mapster Technology Inc. Mapster WP Maps allows Stored XSS.This issue affects Mapster WP Maps: from n/a through 1.2.38...