Vendor
The GeoDirectory WordPress plugin is vulnerable to stored Cross-Site Scripting (XSS) via the post_content parameter, allowing unauthenticated attackers to execute arbitrary web scripts by bypassing shortcode sanitization filters.