WordPress Geo Mashup plugin versions 1.8.2 and below suffer from a cross site scripting vulnerability.