CVE-2026-103485 | hupe13 Extensions for Leaflet Map Plugin up to 5.4 on WordPress Shortcode feature.properties[] cross site scripting

October 29, 2026 Yanac

A vulnerability was found in hupe13 Extensions for Leaflet Map Plugin up to 5.4 on WordPress and classified as problematic. Impacted is an unknown function of the component Shortcode Handler. The manipulation of the argument feature.properties[] results in cross site scripting.

This vulnerability is cataloged as CVE-2026-103485. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More