Vulnerabilities

TI-2024-29597 CVE-2024-44008 · GHSA-p733-9rpx-xwcp

WordPress Geo Mashup plugin <= 1.13.12 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Stored XSS.This issue affects Geo Mashup: from n/a through <= 1.13.12.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00313 Published 2024-09-17 No fix listed CWE-79

TI-2018-10173 CVE-2018-14071 · GHSA-5mfc-mgw8-gff8

The Geo Mashup plugin before 1.10.4 for WordPress has insufficient sanitization of post editor and other user input.

MEDIUM 48

The Geo Mashup plugin before 1.10.4 for WordPress has insufficient sanitization of post editor and other user input.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03054 Published 2018-07-16 No fix listed CWE-20

TI-2015-01260 CVE-2015-1383 · GHSA-5x5v-v8qh-gwrg

Cross-site scripting (XSS) vulnerability in the geo search widget in the Geo Mashup…

LOW 24

Cross-site scripting (XSS) vulnerability in the geo search widget in the Geo Mashup plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the search key.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01959 Published 2015-02-02 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Geo Mashup plugin <= 1.13.12 - Cross Site Scripting (XSS) vulnerability

The Geo Mashup plugin before 1.10.4 for WordPress has insufficient sanitization of post editor and other user input.

Cross-site scripting (XSS) vulnerability in the geo search widget in the Geo Mashup…