The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to cause a denial of service via the url parameter to plugin_googlemap2_proxy.php.
7.5CVSS
6.2AI Score
0.006EPSS
The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url parameter to plugin_googlemap2_proxy.php.
9.8CVSS
9.5AI Score
0.005EPSS
Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the xmlns parameter.
6.1CVSS
6.3AI Score
0.001EPSS
5.3CVSS
6.2AI Score
0.001EPSS
The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to bypass an intended protection mechanism.
7.5CVSS
8AI Score
0.003EPSS
Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla!.
6.1CVSS
6.4AI Score
0.001EPSS
The Googlemaps plugin 3.2 and earlier for Joomla! allows remote attackers with control of a sub-domain belonging to a victim domain to cause a denial of service via the 'url' parameter to plugin_googlemap3_kmlprxy.php. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7428.
5.9CVSS
6.3AI Score
0.006EPSS