Veille CVE

Vendredi 16 octobre 2026

3 CVE

  1. CVE-2026-111405 6.5 Moyenne

    PT Norther Lights Production MapSVG

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Stored XSS.This issue affects MapSVG: from n/a through 8.16.1.

  2. CVE-2026-111399 8.5 Élevée

    PT Norther Lights Production MapSVG

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows SQL Injection.This issue affects MapSVG: from n/a through 8.16.1.

  3. CVE-2026-111397 5.3 Moyenne

    PT Norther Lights Production MapSVG

    Missing Authorization vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Retrieve Embedded Sensitive Data.This issue affects MapSVG: from n/a through 8.16.1.