Leaflet Map
Approved changes feed: RSS · Atom
cpe:2.3:a:bozdoz:leaflet_map:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Bozdoz (39cf3d5b-6158-52b1-ba19-d7bbafaaf375) |
|---|---|
| Product | Leaflet Map (e40c75c9-4112-55ba-94a9-8924ba6f3112) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-5050 |
vulnerable | 2026-06-08 06:19:41.315172 |
Leaflet Map <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MEDIUM (6.4)
The Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2023-10-20T06:35:15.119Z
Updated: 2026-04-08T16:44:52.074Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24468 |
vulnerable | 2026-06-08 05:30:04.432359 |
Leaflet Map < 3.0.0 - Contributor+ Stored XSS
The Leaflet Map WordPress plugin before 3.0.0 does not escape some shortcode attributes before they are used in JavaScript code or HTML, which could allow users with a role as low as Contributors to exploit stored XSS issues
Published: 2021-08-02T10:32:11.000Z
Updated: 2024-08-03T19:35:18.687Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.