← Problems

Reflected XSS flaw stays open after updating

Recent versions of the plugin keep a reflected XSS flaw flagged by security scanners even after the update.

Tier I · Proven The best-established problems.

5 public reports · first reported 10 April 2025 · last reported 15 October 2026

Idea report · $19 · No contacts · All sales final

See a sample idea report

What's going wrong

Several site owners report that security scanners keep flagging this map plugin for a reflected cross-site scripting flaw, even after they installed the latest release.

AI-assisted: written with the help of AI from the reports. The idea report has the full summary.

In the idea report

  • The full summary.
  • The products the 5 reports are about, and how many came each month.
  • Related problems.

No business has been found with this problem yet, so the report has no contacts. All sales are final — no refunds. Pricing.