Medium 6.4
2026-04-08< 4.15
Extensions for Leaflet Map <= 4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'elevation-track' Shortcode
Minimum safe version
4.15
Update to 4.15 or later to address 4 fixable vulnerabilities
Extensions for Leaflet Map <= 4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'elevation-track' Shortcode
Extensions for Leaflet Map <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-12369
CVE-2023-31074