CVE-2024-30451 WordPress Geo Controller plugin <= 8.6.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in INFINITUM FORM Geo Controller allows Stored XSS.This issue affects Geo Controller: from n/a through 8.6.4...

CVE-2024-30451

CVE-2024-30451 : The Red Hat page confirms an improper input neutralization in the INFINITUM Geo Controller (Geo Controller cf-geoplugin) WordPress plugin, causing a Stored XSS. Affected versions are Geo Controller up to 8.6.4 (inclusive). Root cause: input is not properly sanitized during web pa...