Stored Cross-Site Scripting Vulnerability in OSM Map Widget for Elementor Plugin

CVE-2025-8619

What is CVE-2025-8619?

The OSM Map Widget for Elementor plugin is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping. This vulnerability affects all versions up to and including 1.3.0. Authenticated attackers with contributor-level access or higher can exploit this weakness by injecting malicious web scripts into pages. These scripts activate whenever a user accesses a compromised page, potentially leading to session hijacking, data theft, or other malicious outcomes.

References