Stored Cross-Site Scripting in Pronamic Google Maps Plugin for WordPress

CVE-2025-9352

What is CVE-2025-9352?

The Pronamic Google Maps plugin for WordPress is susceptible to Stored Cross-Site Scripting due to a lack of proper input sanitization and output escaping in the description field. Authenticated attackers with Contributor-level permissions or higher can exploit this vulnerability to inject and execute arbitrary web scripts when users visit compromised pages. This risk demands immediate attention to fortify plugin security.

References