Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Unknown | MapFig Studio | affected |
|
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2025-15282 | The MapFig Studio WordPress plugin through 0.2.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack |
Wed, 11 Jun 2025 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Acugis
Acugis mapfig Studio |
|
| Weaknesses | CWE-79 | |
| CPEs | cpe:2.3:a:acugis:mapfig_studio:*:*:*:*:*:wordpress:*:* | |
| Vendors & Products |
Acugis
Acugis mapfig Studio |
Tue, 20 May 2025 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
Thu, 15 May 2025 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The MapFig Studio WordPress plugin through 0.2.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack | |
| Title | MapFig Studio <= 0.2.1 - Stored XSS via CSRF | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: WPScan
Published:
Updated: 2025-05-20T19:23:39.551Z
Reserved: 2024-07-12T13:38:21.979Z
Link: CVE-2024-6712
Vulnrichment
Updated: 2025-05-19T20:26:21.608Z
NVD
Status : Analyzed
Published: 2025-05-15T20:15:56.027
Modified: 2025-06-11T16:58:49.643
Link: CVE-2024-6712
Redhat
No data.
OpenCVE Enrichment
No data.