CVE-2026-73375

HighCVSS 7.1

Published: 18/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Summary

Unauthenticated Cross Site Scripting (XSS) vulnerability in Ultimate Maps by Supsystic versions prior to 1.5.0.

An attacker can inject malicious script that executes in the user's browser, potentially leading to data theft or session hijacking.

Update the Ultimate Maps by Supsystic plugin to version 1.5.0 or later.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic < 1.5.0 versions.