CVE-2025-3737 Google Maps: Store Locator - Critical - Unsupported - SA-CONTRIB-2025-038
The Drupal Google Maps Store Locator module is unsupported and vulnerable, requiring users to migrate to a supported alternative.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-3737?
CVE-2025-3737 is a medium-severity vulnerability in Drupal Google Maps: Store Locator, published on 16 Apr 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Vulnerability in Drupal Google Maps: Store Locator.This issue affects Google Maps: Store Locator: *.*.
Which versions are affected by CVE-2025-3737?
It affects 1 product.
Linux distribution packages (1)
drupal/gmap_store_locator Packagist:https://packages.drupal.org/8 | All versions | None |
Products include Google Maps\ Store Locator Project.
How do I fix CVE-2025-3737?
No fix has been published for CVE-2025-3737 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-3737 being exploited?
There is no known exploitation of CVE-2025-3737 in the wild and no public exploit code.
Sources
Also known as DRUPAL-CONTRIB-2025-038, GHSA-v3r6-268x-w57p.