Skip to content
OpenAdvisories

Vendor

Andrew Norcross

1 known vulnerabilities.

Products

Google Earth Embed 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2025-25078

    WordPress Google Earth Embed plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Andrew Norcross Google Earth Embed google-earth-tours allows Stored XSS.This issue affects Google Earth Embed: from n/a through <= 1.0.

    Andrew Norcross Google Earth Embed