CVE-2026-66604 Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions

Description

Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions.

Affected products and versions

Product	Affected versions	Fixed in
GeoDirectory 2.8	earliest → 2.8.173	No fix stated

Other CVEs of GeoDirectory

The 11 CVEs of GeoDirectory →

CVE-2026-84813 Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions 9.3 Critical CVE-2026-81271 Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions 8.8 High CVE-2026-68565 Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions 6.5 Medium CVE-2026-57681 Subscriber Server Side Request Forgery (SSRF) in GeoDirectory <= 2.8.161 versions 6.4 Medium