Approved changes feed: RSS · Atom

cpe:2.3:a:mapsmarker:leaflet_maps_marker_plugin:0.0.1:*:*:*:*:*:*:*

part: a version: 0.0.1 update: *

VendorMapsmarker (8220214d-68e0-5ae0-b938-6409bcec373c)
ProductLeaflet Maps Marker Plugin (709fe86f-31d2-5826-8736-cf622d918bb7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/juanluisrp/leaflet-maps-marker purl2cpe 2026-06-01 10:18:08.769685
pkg:github/wp-plugins/leaflet-maps-marker purl2cpe 2026-06-01 10:18:08.769688

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-2913 vulnerable 2026-06-08 05:02:07.137283 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the Leaflet plugin 0.0.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) leaflet_layer.php or (2) leaflet_marker.php, as reachable through wp-admin/admin.php.
Published: 2012-05-21T18:00:00.000Z
Updated: 2024-08-06T19:50:05.344Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.