CVE-2026-113493

The GeoDirectory WordPress plugin versions prior to 2.8.194 is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw occurs because the plugin fails to properly sanitize and escape certain attributes within its map shortcode before they are rendered inside a style attribute . This allows use...