Skip to content
OpenAdvisories

Vendor

ProfessionalWiki

1 known vulnerabilities.

Products

Maps 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-52854

    mediawiki/maps: Stored XSS through the overlays parameter in the display_map parser function

    Maps is a MediaWiki extension that enables visualization of geographic data through dynamic embedded maps. Prior to version 12.1.3, the display_map parser function in the Leaflet service accepts attacker-controlled HTML in the overlays parameter, and resource…

    ProfessionalWiki Maps mediawiki mediawiki/maps Ubuntu Packagist