Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-51513 EUVD-2023-56226GHSA-2f72-9984-8jxx

WordPress Geo Controller plugin <= 8.5.2 - Cross Site Scripting (XSS) vulnerability

Published Jan 5, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in INTINITUM FORM Geo Controller allows DOM-Based XSS.This issue affects Geo Controller: from n/a through 8.5.2.

Affected products

VendorProductAffectedFixed
INTINITUM FORM Geo Controller ≤ 8.5.2 —

References