CVE-2025-27313

Summary

CVE-2025-27313 is a Cross-site Scripting (XSS) vulnerability affecting the Google Maps GPX Viewer from an undisclosed version up to 3.6. The issue arises from improper neutralization of user inputs during web page generation, allowing attackers to inject malicious scripts into the application. Successful exploitation of this vulnerability could lead to unintended execution of malicious code within users' web browsers, potentially resulting in information disclosure, account takeover, or other unauthorized actions. Users are strongly advised to update to the latest version of Google Maps GPX Viewer to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.