The Nexos theme up to and including 1.7 for WordPress allows top-map/?search_location= reflected XSS.
nexos project nexos