Back to search
CVE-2026-0521
Published: Feb 6, 2026
Modified: Feb 6, 2026
PUBLISHED
Description
A reflected cross-site scripting (XSS) vulnerability in the PDF export functionality of the TYDAC AG MAP+ solution allows unauthenticated attackers to craft a malicious URL, that if visited by a victim, will execute arbitrary JavaScript in the victim's context. Such a URL could be delivered through various means, for instance, by sending a link or by tricking victims to visit a page crafted by the attacker. This issue was verified in MAP+: 3.4.0.
| Vendor | Product | Versions |
|---|---|---|
TYDAC AG | MAP+ | unaffected 0 - < 3.0.0 |
Weaknesses (CWE)
References
https://www.redguard.ch/blog/2026/02/05/advisory-tydac-mapplus/
third-party-advisory
technical-description
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now