3 matches found
CVE-2025-24680
CVE-2025-24680 affects WordPress WP Multistore Locator (plugin) up to version 2.4.7 and is a cross-site scripting (XSS) issue caused by improper neutralization of script-related HTML tags in reflected input. Public sources consistently state the vulnerability is XSS (Reflected) and indicate remed...
CVE-2023-0152
CVE-2023-0152 affects the WP Multi Store Locator WordPress plugin (versions
CVE-2024-12475
CVE-2024-12475 describes a Stored Cross-Site Scripting flaw in the WP Multistore Locator plugin for WordPress, affecting versions up to 2.4.1. The root cause is insufficient input sanitization and output escaping, enabling an authenticated attacker with Contributor+ privileges to inject scripts t...