Lucene search
+L

3399 matches found

RedhatCVE
RedhatCVE
•added 2025/09/27 3:47 a.m.•30 views

CVE-2025-9044

The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple fields in versions up to, and including, 1.20.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor-level permissions and...

6.4CVSS5.1AI score0.00256EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/26 4:16 a.m.•31 views

CVE-2025-9044

The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple fields in versions up to, and including, 1.20.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor-level permissions and...

6.4CVSS0.00256EPSS
SaveExploits0References6
CVE
CVE
•added 2025/09/26 3:25 a.m.•47 views

CVE-2025-9044

CVE-2025-9044 : Mapster WP Maps (WordPress plugin) is affected by a Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. Exploitation requires authentication (contributor level or higher) and can allow injection of web scripts on pages viewed by users. Affected ...

6.4CVSS4.8AI score0.00256EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2025/09/26 3:25 a.m.•30 views

CVE-2025-9044 Mapster WP Maps <= 1.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple fields in versions up to, and including, 1.20.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor-level permissions and...

6.4CVSS0.00256EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/09/26 3:25 a.m.•8 views

CVE-2025-9044 Mapster WP Maps <= 1.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple fields in versions up to, and including, 1.20.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor-level permissions and...

6.4CVSS4.8AI score0.00256EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/09/26 12:00 a.m.•18 views

PT-2025-39489

Name of the Vulnerable Software and Affected Versions Mapster WP Maps plugin for WordPress versions prior to 1.21.0 Description The Mapster WP Maps plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping. This allows authenticate...

6.4CVSS5.3AI score0.00256EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2025/09/26 12:00 a.m.•20 views

WordPress plugin Mapster WP Maps 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripti...

6.4CVSS5.8AI score0.00256EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/26 12:00 a.m.•6 views

CVE-2025-9044: Improper Neutralization of Input During Web Page Generation

The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple fields in versions up to, and including, 1.20.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor-level permissions and...

6.4CVSS5.9AI score0.00256EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/24 6:30 p.m.•11 views

CVE-2025-57952

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in icopydoc Maps for WP maps-for-wp allows Stored XSS.This issue affects Maps for WP: from n/a through = 1.2.5...

5.9CVSS5.9AI score0.00327EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/09/22 11:42 p.m.•15 views

SUSE CVE-2022-50296

In the Linux kernel, the following vulnerability has been resolved: UM: cpuinfo: Fix a warning for CONFIGCPUMASKOFFSTACK When CONFIGCPUMASKOFFSTACK and CONFIGDEBUGPERCPUMAPS is selected, cpumaxbitswarn generates a runtime warning similar as below while we show /proc/cpuinfo. Fix this by using...

5.5CVSS6.5AI score0.00163EPSS
SaveExploits0References3
NVD
NVD
•added 2025/09/22 7:15 p.m.•13 views

CVE-2025-57952

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in icopydoc Maps for WP maps-for-wp allows Stored XSS.This issue affects Maps for WP: from n/a through = 1.2.5...

5.9CVSS0.00327EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/09/22 7:09 p.m.•12 views

WordPress Maps for WP Plugin <= 1.2.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Maps for WP versions = 1.2.5...

5.9CVSS6AI score0.00327EPSS
SaveExploits0Affected Software1
CVE
CVE
•added 2025/09/22 6:24 p.m.•20 views

CVE-2025-57952

CVE-2025-57952 is a Stored XSS in Maps for WP (WordPress plugin) affecting Maps for WP versions up to 1.2.5. The description notes improper input neutralization during web page generation. Connected documents indicate the vulnerability exists for Maps for WP

5.9CVSS5.9AI score0.00327EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/22 6:24 p.m.•4 views

CVE-2025-57952 WordPress Maps for WP Plugin <= 1.2.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in icopydoc Maps for WP allows Stored XSS. This issue affects Maps for WP: from n/a through 1.2.5...

5.9CVSS5.6AI score0.00327EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/22 6:24 p.m.•26 views

CVE-2025-57952 WordPress Maps for WP Plugin <= 1.2.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in icopydoc Maps for WP maps-for-wp allows Stored XSS.This issue affects Maps for WP: from n/a through = 1.2.5...

5.9CVSS0.00327EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•15 views

PT-2025-38802

Name of the Vulnerable Software and Affected Versions icopydoc Maps for WP versions through 1.2.5 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, potentially leading to Cross-site Scripting XSS. This allows an attacker to inject...

5.9CVSS6.1AI score0.00327EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•6 views

CVE-2025-57952: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in icopydoc Maps for WP maps-for-wp allows Stored XSS.This issue affects Maps for WP: from n/a through = 1.2.5...

5.9CVSS5.8AI score0.00327EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/22 12:00 a.m.•11 views

WordPress plugin Maps for WP 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

5.9CVSS5.8AI score0.00327EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/19 12:00 a.m.•13 views

PT-2025-38654

CVE-2025-59678 - Google Maps Unvalidated Redirect CVE ID : CVE-2025-59678 Published : Sept. 19, 2025, 3:15 a.m. | 1 hour, 50 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

6.4AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/09/17 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2022-50324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: maps: pxa2xx-flash: fix memory leak in probe Free 'info' upon remapping error to avoid a memory leak. : Reword the commit log CVE-2022-50324 Note that Ness...

5.5CVSS5.6AI score0.00163EPSS
SaveExploits0References2
Rows per page
Query Builder