CVE-2026-66604 Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions

Description

Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
GeoDirectory 2.8	premières → 2.8.173	Pas de correctif indiqué

Autres CVE de GeoDirectory

Les 11 CVE de GeoDirectory →

CVE-2026-84813 Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions 9.3 Critique CVE-2026-81271 Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions 8.8 Élevée CVE-2026-68565 Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions 6.5 Moyenne CVE-2026-57681 Subscriber Server Side Request Forgery (SSRF) in GeoDirectory <= 2.8.161 versions 6.4 Moyenne