Stored Cross-Site Scripting in 10WebMapBuilder Plugin for WordPress
CVE-2020-36853
7.2HIGH
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 18 October 2025
What is CVE-2020-36853?
The 10WebMapBuilder plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping. This vulnerability allows unauthenticated attackers to inject arbitrary scripts into pages. When users access a page that has been compromised, the malicious scripts can execute, potentially leading to site takeover or compromising user data.
Affected Version(s)
10Web Map Builder for Google Maps * < 1.0.64