Browse all 3 CVE security advisories affecting html5maps. AI-powered Chinese analysis, POCs, and references for each vulnerability.
HTML5maps provides interactive mapping solutions for web applications, enabling organizations to embed customizable geographic visualizations. Historically, the platform has been susceptible to cross-site scripting (XSS) vulnerabilities due to improper input sanitization in map rendering functions, with three CVEs recorded. Security researchers have identified remote code execution risks through maliciously crafted map parameters, though no major public incidents have been confirmed. The application's dynamic content generation and third-party integrations present potential attack surfaces for privilege escalation, particularly in multi-tenant environments. While HTML5maps maintains standard security practices, its extensive client-side processing continues to require robust input validation and content security policies to mitigate emerging threats.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-11865 | Tabs Maker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting — Tabs MakerCWE-79 | 6.4 | Medium | 2024-12-14 |
This page lists every published CVE security advisory associated with html5maps. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.