Description
Cross-Site Request Forgery (CSRF) vulnerability in josepsitjar StoryMap wp-storymap allows SQL Injection.This issue affects StoryMap: from n/a through <= 2.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| josepsitjar | StoryMap | ≤ 2.1 | — |
High · 8.2
CVE-2025-52797
EUVD-2025-24891GHSA-49vw-4m5g-r9gp
WordPress StoryMap Plugin <= 2.1 - Cross Site Request Forgery (CSRF) Vulnerability
Published Aug 14, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack