Share
## https://sploitus.com/exploit?id=DC67024C-7E9C-5855-B822-77F66EA57DA5
# Leaflet XSS POC
Proof of Concept for CVE-2025-69993 โ XSS vulnerability in Leaflet's `bindPopup()` method.
## Versions
| Dependency | Version |
|------------|---------|
| Angular | 21.0.0 |
| Angular CLI | 21.0.1 |
| Leaflet | 1.9.4 |
| TypeScript | 5.9.2 |
| Node.js | >= 18 |
## Setup
```bash
npm install
```
## Development server
```bash
npm start
```
Open `http://localhost:4200/` in a browser.