4.3
Moyenne
CVE-2026-24549 Cross-Site Request Forgery (CSRF) vulnerability in Paolo GeoDirectory geodirectory allows Cross Site Request…
Description
Cross-Site Request Forgery (CSRF) vulnerability in Paolo GeoDirectory geodirectory allows Cross Site Request Forgery.This issue affects GeoDirectory: from n/a through <= 2.8.149.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| GeoDirectory 2.8 | premières → 2.8.149 | Pas de correctif indiqué |
Autres CVE de GeoDirectory
Les 11 CVE de GeoDirectory →
CVE-2026-84813
Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions
9.3
Critique
CVE-2026-81271
Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions
8.8
Élevée
CVE-2026-66604
Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions
7.1
Élevée
CVE-2026-68565
Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions
6.5
Moyenne