CVE-2025-58886

CVE-2025-58886 describes a stored XSS in the WordPress plugin Instant Locations (versions up to 1.0). The issue stems from Improper Neutralization of Input During Web Page Generation , enabling stored cross-site scripting. The CVE entry lists this as a WordPress plugin vulnerability with a base C...