PT-2026-83318 · WordPress · Geotargetingwp
CVSS v3.1
7.1
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
geotargetingwp versions prior to 3.5.6.2
Description
The plugin fails to sanitize or escape several parameters before reflecting them in AJAX responses served with an HTML content type. This allows unauthenticated attackers to perform reflected Cross-Site Scripting (XSS), where arbitrary web scripts are executed when a victim is tricked into submitting a crafted request.
Recommendations
Update the plugin to version 3.5.6.2 or later.
Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Geotargetingwp