CVE-2025-24674

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Denis Cherniatev ShMapper by Teplitsa shmapper-by-teplitsa allows Stored XSS.This issue affects ShMapper by Teplitsa: from n/a through = 1.5.0...

CVE-2024-12518

CVE-2024-12518 concerns the WordPress plugin ShMapper by Teplitsa. The issue is a Stored Cross-Site Scripting vulnerability in the shmMap shortcode, caused by insufficient input sanitization and output escaping on user-supplied attributes. It affects the plugin up to version 1.4.18 (and likely ea...