Share
## https://sploitus.com/exploit?id=DC67024C-7E9C-5855-B822-77F66EA57DA5
# Leaflet XSS POC

Proof of Concept for CVE-2025-69993 โ€” XSS vulnerability in Leaflet's `bindPopup()` method.

## Versions

| Dependency | Version |
|------------|---------|
| Angular | 21.0.0 |
| Angular CLI | 21.0.1 |
| Leaflet | 1.9.4 |
| TypeScript | 5.9.2 |
| Node.js | >= 18 |

## Setup

```bash
npm install
```

## Development server

```bash
npm start
```

Open `http://localhost:4200/` in a browser.