OSM – OpenStreetMap, CVE-2026-33559
- CVE, Research URL
- Home page URL
- Application
- Published on
- Mar 27, 2026
- Research Description
- WordPress Plugin "OpenStreetMap" provided by MiKa contains a cross-site scripting vulnerability. On the site with the affected version of the plugin enabled, a logged-in user with a page-creating/editing privilege can embed some malicious script with a crafted HTTP request. When a victim user accesses this page, the script may be executed in the user's web browser.
- Affected versions
-
max 6.1.15.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| FooGallery Captions (CVE-2025-23889) , Jan 25, 2025 |