Cross-site Scripting Vulnerability in CBX Map for Google Map & OpenStreetMap by Sabuj Kundu
CVE-2025-47669
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 7 May 2025
What is CVE-2025-47669?
A Cross-site Scripting (XSS) vulnerability exists in the CBX Map for Google Map & OpenStreetMap plugin developed by Sabuj Kundu. This vulnerability arises from improper neutralization of user input, which may allow attackers to inject malicious scripts into web pages viewed by users. The affected versions, ranging from n/a to 1.1.12, can expose users to significant security risks if exploited. Ensuring input validation and utilizing secure coding practices can mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
CBX Map for Google Map & OpenStreetMap <= 1.1.12
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved