Medium · 6.5 CVE-2026-27427 EUVD-2026-31804GHSA-7r8v-3xv6-7cm6

WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerability

Published May 26, 2026 · Updated May 26, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup allows Stored XSS.

This issue affects Geo Mashup: from n/a through 1.13.18.

Vendor	Product	Affected	Fixed
Dylan Kuhn	Geo Mashup	≤ 1.13.18	—