6.5
Medium
CVE-2025-57953 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 100plugins Open…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 100plugins Open User Map open-user-map allows DOM-Based XSS.This issue affects Open User Map: from n/a through <= 1.4.14.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Open User Map 1.4 | earliest → 1.4.14 | No fix stated |
Other CVEs of Open User Map
The 6 CVEs of Open User Map →
CVE-2026-84818
Unauthenticated Cross Site Scripting (XSS) in Open User Map <= 1.4.50 versions
7.1
High
CVE-2026-66445
Contributor Cross Site Scripting (XSS) in Open User Map <= 1.4.46 versions
6.5
Medium
CVE-2024-13362
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in…
6.1
Medium
CVE-2025-68002
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 100plugins Open User Map…
6.5
Medium