mapsmarker leaflet maps marker plugin vulnerabilities

Latest mapsmarker leaflet maps marker plugin CVEs

Newest publication first

1. CVE-2012-2913 Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) < 2.3.1 - Cross-Site Scripting

   Published 2012-05-21

   Medium·CVSS 4.3 EPSS 3.8% Public exploit

   Multiple cross-site scripting (XSS) vulnerabilities in the Leaflet plugin 0.0.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) leaflet_layer.php or (2) leaflet_marker.php, as reachable through wp-admin/admin.php.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.