VULNERABILITY INTELLIGENCE
CVE-2026-33559
CVSS score5.4 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2026-03-27
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Description
WordPress Plugin "OpenStreetMap" provided by MiKa contains a cross-site scripting vulnerability. On the site with the affected version of the plugin enabled, a logged-in user with a page-creating/editing privilege can embed some malicious script with a crafted HTTP request. When a victim user accesses this page, the script may be executed in the user's web browser.
Weakness classification
- vultures@jpcert.or.jp: CWE-79