The XSS vulnerability with Google Maps was discovered by Zohar Shachar, Head of Application Security at Wix, and reported to Google through their bug bounty program. The vulnerability resides in Google Maps that are used for creating your map. The map name was found to be present in the CDATA tag which means our code will not be rendered by the browsers code The vulnerability was reported and Google acknowledged the issue and updated the bug. For each vulnerability report the researcher is $5,000, so the total reward is $10,000.”]
Source: https://gbhackers.com/google-maps-xss-bug-bounty-doubled-after-the-original-fix-had-failed/