CVE-2024-31116

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web 10Web Map Builder for Google Maps.This issue affects 10Web Map Builder for Google Maps: from n/a through 1.0.74.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
10Web	10Web Map Builder for Google Maps	<= 1.0.74
10web	map_builder_for_google_maps	<= 1.0.74

References

Timeline

Published: Mar 31, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-311176.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Moises Heberle WooCommerce Bookings Ca CVE-2024-311186.5Missing Authorization vulnerability in Smartypants SP Project & Document Manager allows Exploiting Incorrectly Configured Access Control Sec CVE-2024-311195.9Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Vasilis Triantafyllou Special Box for CVE-2024-31124.8The Quotes and Tips by BestWebSoft WordPress plugin before 1.45 does not properly validate image files uploaded, allowing high privilege use CVE-2024-311205.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevart Responsive Image Gallery, Gal CVE-2024-311216.5Contributor Cross Site Scripting (XSS) in HeartThis <= 0.1.0 versions.CVE-2024-311225.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Prism IT Systems User Rights Access Ma CVE-2024-311237.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebDorado SpiderFAQ allows Reflected X CVE-2024-311277.3An improper verification of a loaded library in Zscaler Client Connector on Mac < 4.2.0.241 may allow a local attacker to elevate their priv CVE-2024-31135.9The FormFlow: WhatsApp Social and Advanced Form Builder with Easy Lead Collection WordPress plugin before 2.12.2 does not sanitise and escap CVE-2024-311346.5In JetBrains TeamCity before 2024.03 authenticated users without administrative permissions could register other users when self-registratio CVE-2024-311356.1In JetBrains TeamCity before 2024.03 open redirect was possible on the login page