Google Map Professional (Map In Your Language)

WordPress Google Map Professional - Cross-Site Scripting

WordPress Google Map Professional (Map In Your Language) plugin through 1.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users such as admin, exploit requires victim to load a maliciously crafted URL.