Mapsplugin » Googlemaps : Security Vulnerabilities, CVEs,
The Googlemaps plugin 3.2 and earlier for Joomla! allows remote attackers with control of a sub-domain belonging to a victim domain to cause a denial of service via the 'url' parameter to plugin_googlemap3_kmlprxy.php. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7428.
Max CVSS
5.9
EPSS Score
0.27%
Published
2017-09-28
Updated
2017-10-06
Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla!.
Max CVSS
6.1
EPSS Score
0.09%
Published
2017-08-29
Updated
2017-09-01
The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to bypass an intended protection mechanism.
Max CVSS
7.5
EPSS Score
0.32%
Published
2017-08-29
Updated
2017-09-01
Full path disclosure in the Googlemaps plugin before 3.1 for Joomla!.
Max CVSS
5.3
EPSS Score
0.11%
Published
2017-08-29
Updated
2017-09-01
Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the xmlns parameter.
Max CVSS
6.1
EPSS Score
0.13%
Published
2017-08-28
Updated
2017-08-30
The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url parameter to plugin_googlemap2_proxy.php.
Max CVSS
9.8
EPSS Score
0.47%
Published
2017-09-14
Updated
2017-09-27
The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to cause a denial of service via the url parameter to plugin_googlemap2_proxy.php.
Max CVSS
7.5
EPSS Score
0.60%
Published
2017-09-07
Updated
2017-09-14
7 vulnerabilities found