CVE-2025-3737
CVSS 3.1 Score 5.9 of 10 (medium)
Details
Published Apr 16, 2025
Updated: Apr 17, 2025
Summary
CVE-2025-3737 is a newly disclosed vulnerability impacting the Google Maps: Store Locator module in Drupal. The issue permits unauthenticated attackers to inject and execute malicious JavaScript code through specially crafted map markers. Successful exploitation could lead to server-side request forgery, information disclosure, or remote code execution. Users are advised to update their Drupal installations as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.