photoweblog OSM – OpenStreetMap

• CVE-2026-4429 Medium 6.4 OSM <= 6.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker_name' Shortcode Attribute 0.2%
• CVE-2024-8991 Medium 6.4 OSM <= 6.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via osm_map and osm_map_v3 Shortcodes 0.4%
• CVE-2024-3604 Critical 9.9 OSM – OpenStreetMap <= 6.0.3 - Authenticated (Contributor+) SQL Injection 0.5%
• CVE-2024-3603 Medium 6.4 OSM – OpenStreetMap <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%