Lucene search
+L

46 matches found

Cvelist
Cvelist
•added 2025/05/16 3:45 p.m.•30 views

CVE-2025-47557 WordPress MapSVG plugin <= 8.5.31 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RomanCode MapSVG mapsvg allows Stored XSS.This issue affects MapSVG: from n/a through = 8.5.31...

6.5CVSS0.00262EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/16 12:00 a.m.•17 views

WordPress plugin MapSVG has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5CVSS8.3AI score0.00314EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/05/16 12:00 a.m.•23 views

WordPress plugin MapSVG has a code injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

5.3CVSS8.4AI score0.00364EPSS
SaveExploits0References3
VulnCheck KEV
VulnCheck KEV
•added 2024/01/22 12:00 a.m.•7 views

VulnCheck KEV: CVE-2022-0592

The MapSVG WordPress plugin before 6.2.20 does not validate and escape a parameter via a REST endpoint before using it in a SQL statement, leading to a SQL Injection exploitable by unauthenticated users...

9.8CVSS8.2AI score0.10172EPSS
SaveIn wildExploits2References370
osv_cve
osv_cve
•added 2022/05/09 5:15 p.m.•23 views

CVE-2022-0592

The MapSVG WordPress plugin before 6.2.20 does not validate and escape a parameter via a REST endpoint before using it in a SQL statement, leading to a SQL Injection exploitable by unauthenticated users...

9.8CVSS7.4AI score0.10172EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2022/05/09 5:15 p.m.•18 views

CVE-2022-0592

The MapSVG WordPress plugin before 6.2.20 does not validate and escape a parameter via a REST endpoint before using it in a SQL statement, leading to a SQL Injection exploitable by unauthenticated users...

9.8CVSS8.1AI score0.10172EPSS
SaveExploits2References3
Rows per page
Query Builder