photoweblog

Products

Product	CVEs	Exploited	Latest
OSM – OpenStreetMap	4	–	Apr 9, 2026

CVE-2026-4429 Medium 6.4 OSM <= 6.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker_name' Shortcode Attribute 0.2%
CVE-2024-8991 Medium 6.4 OSM <= 6.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via osm_map and osm_map_v3 Shortcodes 0.4%
CVE-2024-3604 Critical 9.9 OSM – OpenStreetMap <= 6.0.3 - Authenticated (Contributor+) SQL Injection 0.5%
CVE-2024-3603 Medium 6.4 OSM – OpenStreetMap <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%