ProfessionalWiki Maps vulnerabilities

Latest ProfessionalWiki Maps CVEs

Newest publication first

1. CVE-2026-52854 mediawiki/maps: Stored XSS through the overlays parameter in the display_map parser function

   Published 2026-08-18

   High·CVSS 8.6 EPSS 0.58%

   Maps is a MediaWiki extension that enables visualization of geographic data through dynamic embedded maps. Prior to version 12.1.3, the display_map parser function in the Leaflet service accepts attacker-controlled HTML in the overlays parameter, and resources/leaflet/jquery.leaf...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.