CVE-2017-16919: Mapos Project Mapos

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

MapOS 3.1.11 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description parameter.

Affected products

• Mapos Project Mapos: up to and including 3.1.11

Published 2017-11-21. Last modified 2026-06-17.