CVE-2025-13958 | YaMaps Plugin up to 0.6.39 on WordPress Shortcode cross site scripting

A vulnerability marked as problematic has been reported in YaMaps Plugin up to 0.6.39 on WordPress. This affects an unknown part of the component Shortcode Handler. The manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2025-13958. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.