Skip to content
Sign in
6.5 Medium

CVE-2024-50437 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This issue affects GeoDirectory: from n/a through <= 2.3.80.

Affected products and versions

Product Affected versions Fixed in
GeoDirectory 2.3 earliest → 2.3.80 No fix stated
GeoDirectory 2.3 earliest → 2.3.80 No fix stated

Other CVEs of GeoDirectory

The 2 CVEs of GeoDirectory →
CVE-2024-43145 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AyeCode Ltd… 8.5 High
Track this CVE