100plugins Open User Map – Interactive Leaflet Maps vulnerabilities (CVE)

CVE records published for 100plugins Open User Map – Interactive Leaflet Maps, newest first. Follow to get an email when a new one appears.

1 results

6.4Medium

CVE-2026-15755 3 months ago

Open User Map <= 1.4.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

100plugins Open User Map – Interactive Leaflet Maps

The Open User Map – Interactive Leaflet Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 1.4.45 due to insufficient input sanitization and output escaping. This makes it poss…