Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Aaxee

#52292of 53,624
4Total CVSS
Vulnerabilities · 1
PT-2023-10253
4.0
2023-02-07
Openseamap · Openseamap Online Chart · CVE-2015-10074
**Name of the Vulnerable Software and Affected Versions** OpenSeaMap online chart version 1.2 **Description** A vulnerability was found in the function `init` of the file `index.php`. The manipulation of the argument `mtext` leads to cross site scripting. It is possible to launch the attack remotely. **Recommendations** For OpenSeaMap online chart version 1.2, upgrade to version staging to address this issue. As a temporary workaround, consider restricting access to the `init` function in the `index.php` file until the upgrade is applied. Additionally, avoid using the `mtext` argument in the affected component until the issue is resolved.