CVE-2025-47562: WordPress MapSVG plugin <= 8.5.34 - Content Injection Vulnerability
Improper Control of Generation of Code ('Code Injection') vulnerability in RomanCode MapSVG allows Code Injection. This issue affects MapSVG: from n/a through 8.5.34.
Other sources
Improper Control of Generation of Code ('Code Injection') vulnerability in RomanCode MapSVG mapsvg allows Code Injection.This issue affects MapSVG: from n/a through <= 8.5.34.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47562?
CVE-2025-47562 is a critical vulnerability that allows code injection in the affected versions of MapSVG.
How do I fix CVE-2025-47562?
To fix CVE-2025-47562, update MapSVG to version 8.5.35 or later.
What versions of MapSVG are affected by CVE-2025-47562?
CVE-2025-47562 affects MapSVG versions from n/a up to 8.5.34.
Is CVE-2025-47562 a remote exploit?
Yes, CVE-2025-47562 allows remote attackers to exploit the code injection vulnerability.
What systems are vulnerable to CVE-2025-47562?
The vulnerable systems are those running MapSVG versions n/a through 8.5.34, including those integrated with WordPress.