CVE-2015-7668: EASY2MAP

Medium severity, CVSS 6.1. EPSS: 2.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.3.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map_id parameter.

Affected products

• EASY2MAP EASY2MAP: before 1.3.0 (fixed in 1.3.0)

Published 2017-12-27. Last modified 2026-06-17.