WP Geo, CVE-2025-62904

CVE, Research URL: CVE-2025-62904
Home page URL: Security reports for WP Geo
Application: WP Geo
Published on: Oct 27, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ben Huson WP Geo wp-geo allows Stored XSS.This issue affects WP Geo: from n/a through <= 3.5.1.
Affected versions: max 3.5.1.
Status: vulnerable