A vulnerability labeled as problematic has been found in Leaflet up to 1.9.4. This affects the function
bindPopup. Such manipulation leads to cross site scripting.
This vulnerability is uniquely identified as CVE-2025-69993. The attack can be launched remotely. No exploit exists.
