CVE-2026-66445

MediumCVSS 6.5

Published: 27/07/2026(UTC)Updated: 24/10/2026(UTC)Translated: 27/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

The Open User Map plugin up to version 1.4.46 contains a Cross Site Scripting (XSS) vulnerability exploitable by a contributor. This allows injection of malicious scripts into the page.

Risk Assessment

An attacker can steal user sessions, redirect users to malicious sites, or alter the appearance of the website.

Recommendation

Update the Open User Map plugin to the latest available version that fixes this vulnerability.

Other vulnerabilities in Open User Map

CVE-2026-84818High
Unauthenticated Cross Site Scripting (XSS) vulnerability in Open User Map versions up to 1.4.50. Allows an attacker to inject malicious script into a page, which executes in the victim's browser.

Original NVD description (English source)

Contributor Cross Site Scripting (XSS) in Open User Map <= 1.4.46 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS