CVE-2025-23628 WordPress GeoDigs plugin <= 3.4.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NewMediaOne GeoDigs geodigs allows Reflected XSS.This issue affects GeoDigs: from n/a through = 3.4.1...

CVE-2025-23628

CVE-2025-23628: Reflected XSS in New Media One GeoDigs (GeoDigs) WordPress plugin; affects GeoDigs versions up to 3.4.1. Root cause: improper input neutralization during web page generation. CVSS v3.1 base score 7.1 (HIGH). Exploit details and remediation/version fixes are not provided in the sup...

Wordpress plugin geodigs has multiple cross-site scripting vulnerabilities

WordPress is a blogging platform developed using the PHP language that allows users to set up their own websites on servers that support PHP and MySQL databases. WordPress can also be used as a content management system CMS. Wordpress plugin geodigs has an xss vulnerability due to improper...