Stored Cross-site Scripting Vulnerability in IP2Location Country Blocker by IP2Location
CVE-2025-24731
5.9MEDIUM
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 24 January 2025
What is CVE-2025-24731?
A Stored Cross-site Scripting (XSS) vulnerability resides in the IP2Location Country Blocker plugin, allowing attackers to inject malicious scripts into web pages viewed by users. This flaw arises from improper input neutralization during web page generation, potentially compromising any visitor's session and enabling an attacker to execute harmful code. Users of the affected versions should promptly apply recommended patches to mitigate associated risks.
Affected Version(s)
Download IP2Location Country Blocker <= 2.38.3