Description
The GeoDirectory WordPress plugin before 2.8.110 does not sanitise and escape a place-category setting before outputting it back in an admin page, allowing high-privilege users such as editors and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in a multisite setup).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | GeoDirectory | < 2.8.110 | 2.8.110 |
References
- https://wpscan.com/vulnerability/bb6daced-3ee3-4ec7-a221-9981cd85285a/ exploit vdb-entry technical-description