← Database

CVE-2025-39455

HIGH CVSS: 7.1 Published: 2025-04-17 Modified: 2026-06-17

Description

Cross-Site Request Forgery (CSRF) vulnerability in IP2Location IP2Location Variables ip2location-variables allows Reflected XSS.This issue affects IP2Location Variables: from n/a through <= 2.9.5.

Affected Platforms

Unknown

Weakness Type

CWE-352

References