Ip2Location Download Ip2Location Country Blocker vulnerabilities

3 known vulnerabilities affecting ip2location/download_ip2location_country_blocker.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM2

Vulnerabilities

Page 1 of 1

CVE-2025-24731MEDIUMCVSS 4.8≤ 2.38.32025-01-24

CVE-2025-24731 [MEDIUM] CWE-79 CVE-2025-24731: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IP2Location Download IP2Location Country Blocker ip2location-country-blocker allows Stored XSS.This issue affects Download IP2Location Country Blocker: from n/a through <= 2.38.3.

CVE-2023-37865MEDIUMCVSS 5.3≥ n/a, ≤ 2.29.12024-06-04

CVE-2023-37865 [MEDIUM] CWE-290 CVE-2023-37865: Authentication Bypass by Spoofing vulnerability in IP2Location Download IP2Location Country Blocker Authentication Bypass by Spoofing vulnerability in IP2Location Download IP2Location Country Blocker allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Download IP2Location Country Blocker: from n/a through 2.29.1.

CVE-2024-32443HIGHCVSS 8.8≥ n/a, ≤ 2.34.22024-04-15

CVE-2024-32443 [HIGH] CWE-352 CVE-2024-32443: Cross-Site Request Forgery (CSRF) vulnerability in IP2Location Download IP2Location Country Blocker. Cross-Site Request Forgery (CSRF) vulnerability in IP2Location Download IP2Location Country Blocker.This issue affects Download IP2Location Country Blocker: from n/a through 2.34.2.