Known vulnerabilities in the Mapsvg plugin
9 security advisories have been published for the Mapsvg plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- MapSVG - SQL Injection (CVE-2026-59527) CRITICAL
- MapSVG - Arbitrary File Upload (CVE-2026-65455) CRITICAL
- MapSVG - SQL Injection (CVE-2026-65451) HIGH
- MapSVG - SQL Injection (CVE-2026-65450) HIGH
- MapSVG - Cross-Site Scripting (XSS) (CVE-2026-65449) MEDIUM
- MapSVG - SQL Injection (CVE-2026-59526) CRITICAL
- Mapsvg - Remote Code Execution (CVE-2026-1771) HIGH
- Mapsvg - Cross-Site Scripting (XSS) (CVE-2024-9544) MEDIUM
- Mapsvg - SQL Injection (CVE-2022-0592) CRITICAL