The bws-google-maps plugin prior to 1.3.6 for WordPress has multiple XSS issues.
bestwebsoft google maps