Romancode - vulnerabilities (CVEs)

19 CVEs in 1 products, 0 in the last 30 days, newest from 2026-07-27.

Products

Mapsvg - 19 CVEs

Newest CVEs of Romancode

CVE-2026-59527 - CVSS 9.3 (critical), 2026-07-27: Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.
CVE-2026-65451 - CVSS 8.5 (high), 2026-07-23: Contributor SQL Injection in MapSVG <= 8.14.0 versions.
CVE-2026-65449 - CVSS 6.5 (medium), 2026-07-23: Contributor Cross Site Scripting (XSS) in MapSVG <= 8.14.0 versions.
CVE-2026-65450 - CVSS 8.5 (high), 2026-07-23: Contributor SQL Injection in MapSVG <= 8.14.0 versions.
CVE-2026-59526 - CVSS 9.3 (critical), 2026-07-23: Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.
CVE-2025-68562 - CVSS 9.9 (critical), 2025-12-29: Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from…
CVE-2025-54748 - CVSS 6.5 (medium), 2025-12-18: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RomanCode MapSVG mapsvg allows Path Traversal.This issue…
CVE-2025-62930 - CVSS 6.5 (medium), 2025-10-27: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps…
CVE-2025-54669 - CVSS 9.3 (critical), 2025-08-14: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RomanCode MapSVG mapsvg allows SQL Injection.This issue…
CVE-2025-47559 - CVSS 9.9 (critical), 2025-06-17: Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG mapsvg allows Upload a Web Shell to a Web Server.This issue affects MapSVG:…
CVE-2025-47561 - CVSS 8.8 (high), 2025-06-09: Incorrect Privilege Assignment vulnerability in RomanCode MapSVG mapsvg allows Privilege Escalation.This issue affects MapSVG: from n/a through < 8.6.13.
CVE-2025-47558 - CVSS 7.5 (high), 2025-05-23: Missing Authorization vulnerability in RomanCode MapSVG mapsvg allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MapSVG: from…
CVE-2025-48120 - CVSS 5.3 (medium), 2025-05-16: Improper Control of Generation of Code ('Code Injection') vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Code Injection.This…
CVE-2025-47562 - CVSS 5.3 (medium), 2025-05-16: Improper Control of Generation of Code ('Code Injection') vulnerability in RomanCode MapSVG mapsvg allows Code Injection.This issue affects MapSVG: from n/a…
CVE-2025-47560 - CVSS 5 (medium), 2025-05-16: Missing Authorization vulnerability in RomanCode MapSVG mapsvg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2025-47557 - CVSS 6.5 (medium), 2025-05-16: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg allows Stored XSS.This issue…
CVE-2025-32682 - CVSS 9.9 (critical), 2025-04-17: Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web…
CVE-2025-32684 - CVSS 5 (medium), 2025-04-09: Missing Authorization vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Exploiting Incorrectly Configured Access Control Security…
CVE-2025-32683 - CVSS 6.5 (medium), 2025-04-09: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps…