p PatchFirst

CVE-2026-114703

CVE-2026-114703 · WordPress Extensions for Leaflet Map plugin <= 6.0 - Cross Site Scripting (XSS) vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows Stored XSS.This issue affects Extensions for Leaflet Map: from n/a through 6.0.

CVSS 6.5 · Medium · EPSS 0.2%

Published
Updated

Affected products and versions

Original sources

Check your server →