IP2Location Variables, CVE-2025-39455

CVE, Research URL: CVE-2025-39455
Home page URL: Security reports for IP2Location Variables
Application: IP2Location Variables
Published on: Apr 17, 2025
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in ip2location IP2Location Variables allows Reflected XSS. This issue affects IP2Location Variables: from n/a through 2.9.5.
Affected versions: max 2.9.6.
Status: vulnerable