Vulnerabilities

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extensions for Leaflet Map…

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows Stored XSS.This issue affects Extensions for Leaflet Map: from n/a through 6.0.

Read at NIST National Vulnerability Database (CVE API 2.0)

CVSS

6.5

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-114703 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 8
   CVE NVD 10d ago

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicdark ND Shortcodes For Visual Composer…

   CVSS 6.5 CVE-2026-114702 PHP
2. 8
   CVE NVD 10d ago

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xootix Waitlist Woocommerce ( Back in stock…

   CVSS 6.5 CVE-2026-114701
3. 3
   CVE NVD 10d ago

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gloriafood Restaurant Menu – Food Ordering…

   CVSS 6.5 CVE-2026-114700
4. 3
   CVE NVD 10d ago

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus…

   CVSS 6.5 CVE-2026-112845
5. 10
   CVE NVD 10d ago

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codepeople Contact Form Email…

   CVSS 7.1 CVE-2026-112379
6. 10
   CVE NVD 10d ago

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Mailster WP Mailster wp-mailster allows…

   CVSS 7.1 CVE-2026-111830