CVE-2025-47557: WordPress MapSVG plugin <= 8.5.31 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG allows Stored XSS. This issue affects MapSVG: from n/a through 8.5.31.
Other sources
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg allows Stored XSS.This issue affects MapSVG: from n/a through <= 8.5.31.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47557?
CVE-2025-47557 is a critical Stored XSS vulnerability that can allow attackers to execute malicious scripts.
How do I fix CVE-2025-47557?
To fix CVE-2025-47557, update the MapSVG plugin to the latest version beyond 8.5.31.
Who is affected by CVE-2025-47557?
CVE-2025-47557 affects users of RomanCode MapSVG and the WordPress MapSVG plugin versions up to 8.5.31.
What kind of attacks can be launched using CVE-2025-47557?
With CVE-2025-47557, attackers can exploit the stored XSS vulnerability to execute scripts that compromise user sessions or steal sensitive data.
Is CVE-2025-47557 a widespread vulnerability?
CVE-2025-47557 is considered widespread due to the popularity of the affected MapSVG plugin for web applications.