https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:42:29 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-356503 EUVD-2026-356503 https://cve.radiocsirt.org/vuln/euvd-2026-356503 https://cve.radiocsirt.org/vuln/fkie_cve-2026-52854 <p>Maps is a MediaWiki extension that enables visualization of geographic data through dynamic embedded maps. Prior to version 12.1.3, the display_map parser function in the Leaflet service accepts attacker-controlled HTML in the overlays parameter, and resources/leaflet/jquery.leaflet.js uses the overlay name as a Leaflet layer-control label without escaping it. A wiki user with the edit permission can store malicious wikitext that causes script execution when another user previews or views the affected map. The script executes in the viewing user&#39;s browser session and can access data or perform actions available to that user. This issue is fixed in version 12.1.3.</p> <p>Maps is a MediaWiki extension that enables visualization of geographic data through dynamic embedded maps. Prior to version 12.1.3, the display_map parser function in the Leaflet service accepts attacker-controlled HTML in the overlays parameter, and resources/leaflet/jquery.leaflet.js uses the overlay name as a Leaflet layer-control label without escaping it. A wiki user with the edit permission can store malicious wikitext that causes script execution when another user previews or views the affected map. The script executes in the viewing user&#39;s browser session and can access data or perform actions available to that user. This issue is fixed in version 12.1.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-52854 https://cve.radiocsirt.org/vuln/ghsa-4h7g-5542-v3fc <p><strong>Affected:</strong> Packagist: mediawiki/maps</p> <p>### Summary Stored XSS through wikitext can be performed by inserting malicious HTML into the `overlays` parameter of the `display_map` parser function when using the leaflet service.</p> <p>### Details The maps extension doesn&#39;t escape overlay names before passing them to leaflet. Leaflet then inserts them as HTML: https://github.com/ProfessionalWiki/Maps/blob/ca5139fabd75f3c34f47ea3fd161306506b053bc/resources/lib/leaflet/leaflet.js#L5243</p> <p>### PoC Preview the following wikitext, using the default configuration options of the extension: ``` {{#display_map:0,0|service=leaflet|overlays=OpenTopoMap.&lt;img src=x onerror=&#34;alert(1);&#34;&gt;}} ```</p> <p>### Impact Stored XSS can be performed by any user with the `edit` permission.</p> <p><strong>Affected:</strong> Packagist: mediawiki/maps</p> <p>### Summary Stored XSS through wikitext can be performed by inserting malicious HTML into the `overlays` parameter of the `display_map` parser function when using the leaflet service.</p> <p>### Details The maps extension doesn&#39;t escape overlay names before passing them to leaflet. Leaflet then inserts them as HTML: https://github.com/ProfessionalWiki/Maps/blob/ca5139fabd75f3c34f47ea3fd161306506b053bc/resources/lib/leaflet/leaflet.js#L5243</p> <p>### PoC Preview the following wikitext, using the default configuration options of the extension: ``` {{#display_map:0,0|service=leaflet|overlays=OpenTopoMap.&lt;img src=x onerror=&#34;alert(1);&#34;&gt;}} ```</p> <p>### Impact Stored XSS can be performed by any user with the `edit` permission.</p> https://cve.radiocsirt.org/vuln/ghsa-4h7g-5542-v3fc https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-52854 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: mediawiki, Ubuntu:Pro:20.04:LTS: mediawiki, Ubuntu:Pro:22.04:LTS: mediawiki, Ubuntu:Pro:24.04:LTS: mediawiki, Ubuntu:26.04:LTS: mediawiki</p> <p>Maps is a MediaWiki extension that enables visualization of geographic data through dynamic embedded maps. Prior to version 12.1.3, the display_map parser function in the Leaflet service accepts attacker-controlled HTML in the overlays parameter, and resources/leaflet/jquery.leaflet.js uses the overlay name as a Leaflet layer-control label without escaping it. A wiki user with the edit permission can store malicious wikitext that causes script execution when another user previews or views the affected map. The script executes in the viewing user&#39;s browser session and can access data or perform actions available to that user. This issue is fixed in version 12.1.3.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: mediawiki, Ubuntu:Pro:20.04:LTS: mediawiki, Ubuntu:Pro:22.04:LTS: mediawiki, Ubuntu:Pro:24.04:LTS: mediawiki, Ubuntu:26.04:LTS: mediawiki</p> <p>Maps is a MediaWiki extension that enables visualization of geographic data through dynamic embedded maps. Prior to version 12.1.3, the display_map parser function in the Leaflet service accepts attacker-controlled HTML in the overlays parameter, and resources/leaflet/jquery.leaflet.js uses the overlay name as a Leaflet layer-control label without escaping it. A wiki user with the edit permission can store malicious wikitext that causes script execution when another user previews or views the affected map. The script executes in the viewing user&#39;s browser session and can access data or perform actions available to that user. This issue is fixed in version 12.1.3.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-52854