Cross-site Scripting Vulnerability in Interactive Geo Maps by Interactivegeomaps
CVE-2025-32525

7.1HIGH

Key Information:

Vendor

WordPress
Status
Interactive Geo Maps
Vendor
CVE Published:
11 April 2025

What is CVE-2025-32525?

An input validation flaw in the Interactive Geo Maps plugin allows attackers to exploit reflected cross-site scripting (XSS) vulnerabilities. This issue arises from improper handling of user input during the generation of web pages, potentially enabling malicious scripts to execute in the user's browser context. Attackers can leverage this vulnerability to inject harmful code, compromising the security of users interacting with the affected plugin versions.

Affected Version(s)

Interactive Geo Maps 0 <= 1.6.24

References

https://patchstack.com/database/Wordpress/Plugin/interact...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Le Ngoc Anh (Patchstack Alliance)
.