CVSS 3.0
9.8 criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2013-7429
The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url parameter to plugin_googlemap2_proxy.php.
Severity
- EPSS
- 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
- CWE
- CWE-91
- Published
- Modified
- Record from
- the NVD, synced
Affected
- mapsplugin:googlemaps
References
- http://seclists.org/fulldisclosure/2013/Jul/158
- http://www.mapsplugin.com/Google-Maps/Documentation-of-plugin-Googlemap/security-release-3-1-of-plugin-googlemaps.html
- http://www.openwall.com/lists/oss-security/2015/02/26/11
- http://www.openwall.com/lists/oss-security/2015/02/26/4
- http://seclists.org/fulldisclosure/2013/Jul/158