VULNERABILITY INTELLIGENCE

CVE-2025-27334

CVSS score6.5 MEDIUM

EPSS probability0.26%

CISA KEVNot currently listed

Published2025-06-06

Last modified2026-06-17

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ángel C. Simple Google Static Map simple-google-static-map allows DOM-Based XSS.This issue affects Simple Google Static Map: from n/a through <= 1.0.1.