cleantalk
Vulnerabilities and Security Researches

IP2Location Variables, CVE-2025-39455

CVE, Research URL

CVE-2025-39455

Application

IP2Location Variables

Published on
Apr 17, 2025
Research Description
Cross-Site Request Forgery (CSRF) vulnerability in ip2location IP2Location Variables allows Reflected XSS. This issue affects IP2Location Variables: from n/a through 2.9.5.
Affected versions
Min -, max 2.9.6.
Status
vulnerable