CVE-2026-57380highCWE-79

CVE-2026-57380: falha de alta gravidade em hupe13 Extensions for Leaflet Map

WordPress Extensions for Leaflet Map plugin <= 5.1 - Cross Site Scripting (XSS) vulnerability

Publicada em

Seguir esta CVE+ Monitorar Extensions for Leaflet Map

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.1epss 0.3%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows DOM-Based XSS.This issue affects Extensions for Leaflet Map: from n/a through <= 5.1.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
hupe13 · Extensions for Leaflet Map
CVEs relacionadas — hupe13 Extensions for Leaflet Map

No mesmo produto, das mais perigosas para as menos.

CVE-2023-31074HIGHWordPress Extensions for Leaflet Map Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2026-103485MEDIUMExtensions for Leaflet Map <= 5.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via External GeoJSON PropertyEPSS 0.3%CVE-2025-12369MEDIUMExtensions for Leaflet Map <= 4.7 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2026-5451MEDIUMExtensions for Leaflet Map <= 4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'elevation-track' ShortcodeEPSS 0.2%CVE-2026-114703MEDIUMWordPress Extensions for Leaflet Map plugin <= 6.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-66093MEDIUMWordPress Extensions for Leaflet Map plugin <= 4.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%