CVE-2024-53307: Evisions Maps

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

A reflected cross-site scripting (XSS) vulnerability in the /mw/ endpoint of Evisions MAPS v6.10.2.267 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.

Affected products

• Evisions Maps: up to and including 6.10.2.2678

Published 2025-03-10. Last modified 2026-06-17.