Reflected XSS Vulnerability in WP GeoNames

CVE-2024-53812

Summary

The vulnerability allows for improper neutralization of user input during web page generation, resulting in reflected cross-site scripting (XSS) in the WP GeoNames plugin developed by Jacques Malgrange. This issue affects all versions from n/a through 1.8. An attacker can exploit this vulnerability by tricking users into clicking on a malicious link that executes arbitrary scripts in the context of the user's browser, potentially leading to information theft or other malicious actions.

References