CVE-2026-84818

HighCVSS 7.1

Published: 08/09/2026(UTC)Updated: 08/09/2026(UTC)Translated: 08/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

Unauthenticated Cross Site Scripting (XSS) vulnerability in Open User Map versions up to 1.4.50. Allows an attacker to inject malicious script into a page, which executes in the victim's browser.

Risk Assessment

An attacker can exploit XSS to steal sessions, take over administrator accounts, or spread malware among users visiting the affected site.

Recommendation

Immediately update the Open User Map plugin to a version newer than 1.4.50, which contains a fix for this vulnerability.

Other vulnerabilities in Open User Map

CVE-2026-66445Medium
The Open User Map plugin up to version 1.4.46 contains a Cross Site Scripting (XSS) vulnerability exploitable by a contributor. This allows injection of malicious scripts into the page.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Open User Map <= 1.4.50 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS