Leaflet Maps Marker

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-38782 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MapsMarker.Com e.U. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Leaflet Maps Marker

NVD

CVSS 3.1

5.4

EPSS

0.3%

CVE-2022-1123 HIGH POC This Week

The Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Google WordPress SQLi Leaflet Maps Marker

NVD WPScan

CVSS 3.1

7.2

EPSS

1.1%

CVE-2024-38782

EPSS 0% CVSS 5.4

MEDIUM This Month

XSS Leaflet Maps Marker

NVD

CVE-2022-1123

EPSS 1% CVSS 7.2

HIGH POC This Week

Google WordPress SQLi +1

NVD WPScan