A reflected cross-site scripting (XSS) vulnerability in the /mw/ endpoint of Evisions MAPS v6.10.2.267 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://gist.github.com/Xib3rR4dAr/bf754848f1cd77162f79226144b04648 | Exploit Third Party Advisory |
| https://gist.github.com/Xib3rR4dAr/bf754848f1cd77162f79226144b04648 | Exploit Third Party Advisory |
| https://webhelp.evisions.com/releaseguides/maps/default.htm#6.11/6.11%20Release%20Notes.htm?TocPath=MAPS%25206.11%2520Release%2520Guide%257C_____3 | Release Notes |
Configurations
History
23 Jun 2025, 20:08
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Evisions maps
Evisions |
|
| CPE | cpe:2.3:a:evisions:maps:*:*:*:*:*:*:*:* | |
| References | () https://gist.github.com/Xib3rR4dAr/bf754848f1cd77162f79226144b04648 - Exploit, Third Party Advisory | |
| References | () https://webhelp.evisions.com/releaseguides/maps/default.htm#6.11/6.11%20Release%20Notes.htm?TocPath=MAPS%25206.11%2520Release%2520Guide%257C_____3 - Release Notes |
10 Mar 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-10 18:15
Updated : 2025-06-23 20:08
NVD link : CVE-2024-53307
Mitre link : CVE-2024-53307
JSON object : View
Products Affected
evisions
- maps
CWE
No CWE.