CVE-2025-31557 Information

Description

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in MiKa OSM – OpenStreetMap allows DOM-Based XSS. This issue affects OSM – OpenStreetMap: from n/a through 6.1.6.

Reference

https://patchstack.com/database/wordpress/plugin/osm/vulnerability/wordpress-osm-openstreetmap-plugin-6-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve