Josepsitjar

2 CVEs in 1 Josepsitjar product, including Storymap. Newest: CVE-2025-58874 (2025-09-05). Severity, EPSS and public exploits for each.

Josepsitjar products with known CVEs

ProductCVEs
Storymap2
Josepsitjar CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-58874Medium6.52025-09-05Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in josepsitjar StoryMap wp-storymap allows DOM-Based XSS.Thi…
CVE-2025-52797High8.22025-08-14Cross-Site Request Forgery (CSRF) vulnerability in josepsitjar StoryMap wp-storymap allows SQL Injection.This issue affects StoryMap: from n/a through <= 2.1.