The Geo Mashup plugin prior to 1.10.4 for WordPress has insufficient sanitization of post editor and other user input.
geo mashup project geo mashup