Input validation vulnerability in Google Maps Plugin by Intergeo 2.3.2

The Google Maps Plugin by Intergeo for WordPress is vulnerable to a type of attack called Stored Cross-Site Scripting. This attack affects versions of the plugin up to and including version 2.3.2 and is possible because the plugin does not properly check user supplied data for malicious code and does not protect pages from this type of attack. If a user with contributor-level or higher permissions is able to inject malicious code into a page it will be automatically executed when someone visits the page.