Input validation vulnerability in OSM – OpenStreetMap 6.1.0

The OSM – OpenStreetMap extension for WordPress has a security issue that allows hackers to inject harmful code into web pages using the plugin’s osm_map and osm_map_v3 codes. This can happen in all versions, up to and including version 6.1.0, because the plugin does not properly filter and protect user input. As a result, attackers with contributor or higher level access can add their own code to pages, which will run whenever someone views that page.