CVE-2023-30780

CVE-2023-30780 is a stored XSS vulnerability in the WordPress plugin “User IP and Location” by TheGuideX, affecting versions ≤ 2.2. The issue arises from improper handling of user-supplied input, enabling authenticated users with contributor or higher roles to inject script into stored content. I...

CVE-2023-30780: Improper Neutralization of Input During Web Page Generation

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in TheGuideX User IP and Location plugin = 2.2 versions...