CVE-2025-24731

creationtimestamp| type| source ---|---|--- 2025-01-24 20:15:58+00:00| seen| https://t.me/cvedetector/16324 2025-01-24 23:02:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113885821870826692...

CVE-2025-24731

CVE-2025-24731 = Stored Cross-Site Scripting in WordPress plugin “IP2Location Country Blocker” (versions up to 2.38.3). The issue arises from improper input neutralization during web page generation, enabling attackers to inject malicious scripts that could be stored and later executed in unsuspe...

CVE-2025-24731 WordPress IP2Location Country Blocker plugin <= 2.38.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IP2Location Download IP2Location Country Blocker ip2location-country-blocker allows Stored XSS.This issue affects Download IP2Location Country Blocker: from n/a through = 2.38.3...