4.3
Medium
CVE-2026-24549 Cross-Site Request Forgery (CSRF) vulnerability in Paolo GeoDirectory geodirectory allows Cross Site Request…
Description
Cross-Site Request Forgery (CSRF) vulnerability in Paolo GeoDirectory geodirectory allows Cross Site Request Forgery.This issue affects GeoDirectory: from n/a through <= 2.8.149.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GeoDirectory 2.8 | earliest → 2.8.149 | No fix stated |
Other CVEs of GeoDirectory
The 11 CVEs of GeoDirectory →
CVE-2026-84813
Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions
9.3
Critical
CVE-2026-81271
Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions
8.8
High
CVE-2026-66604
Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions
7.1
High
CVE-2026-68565
Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions
6.5
Medium