Skip to content
OpenAdvisories

Vendor

Chargemap

7 known vulnerabilities.

4 results · Clear filters · Feed

  • Medium 5.4

    Chargemap stored XSS

    Chargemap contains a stored cross site scripting vulnerability. A remote, unauthenticated attacker could craft a payload in the username field of the account registration page and associate the new account with a victim's email. The attacker could send a forg…

  • Medium 5.4
    CVE-2026-67176 Public exploit

    Chargemap open redirect

    Chargemap contains an open redirect vulnerability in the authentication login endpoint. A remote, unauthenticated attacker could send a crafted URL to a victim and redirect them to an attacker controlled domain. Fixed 2026-07-17.

  • Medium 4.6
    CVE-2026-67175 Public exploit

    Chargemap stored XSS

    Chargemap contains a stored cross-site scripting vulnerability that allows a remote, authenticated attacker to craft a malicious payload in the user profile page that executes when another user views the attacker's profile. Fixed 2026-07-17.

  • Medium 6.5

    Chargemap chargemap.com Insufficiently Protected Credentials

    Charging station authentication identifiers are publicly accessible via web-based mapping platforms.