WordPress OpenStreetMap Plugin Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been identified in the WordPress OpenStreetMap plugin by MiKa, affecting versions prior to 6.1.15. The vulnerability allows logged-in users with page creation or editing privileges to inject malicious scripts into pages via crafted HTTP requests. When another user accesses the compromised page, the injected script could be executed in their web browser.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where injected scripts are executed in the context of the user's browser.

Remediation

Users are advised to update the OpenStreetMap WordPress plugin to the latest version.