← CVE Intelligence

CVE-2026-14307

Geotargeting WP < 3.5.6.2 - Reflected XSS PUBLISHED

Description (CNA)

The geotargetingwp WordPress plugin before 3.5.6.2 does not sanitise or escape several parameters before reflecting them back in AJAX responses that are served with an HTML content type, allowing unauthenticated attackers to inject arbitrary web scripts that execute when a victim is tricked into submitting a crafted request.

Affected (CNA)

Vendor / productVersions
Unknown / geotargetingwpaffected 0 before 3.5.6.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.