Dylan Kuhn Geo Mashup vulnerabilities
9 vulnerabilities
Known vulnerabilities in Dylan Kuhn Geo Mashup, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-48293dylan kuhngeo mashup+1
EPSS score0.43%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows PHP Local File Inclusion.This issue affects Geo Mashup: from n/a through <= 1.13.16.CVE-2024-44008cyberhobogeo_mashup+2EPSS score0.31%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Stored XSS.This issue affects Geo Mashup: from n/a through <= 1.13.12.CVE-2026-42734dylan kuhngeo mashup+1EPSS score0.25%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.This issue affects Geo Mashup: from n/a through <= 1.13.19.CVE-2026-48967dylan kuhngeo mashup+1EPSS score0.36%
Subscriber SQL Injection in Geo Mashup <= 1.13.19 versions.CVE-2026-66450dylan kuhngeo mashup+1EPSS score0.47%
Unauthenticated Local File Inclusion in Geo Mashup <= 1.13.18 versions.CVE-2026-66449dylan kuhngeo mashup+1EPSS score0.25%
Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.18 versions.CVE-2026-27427dylan kuhngeo mashup+1EPSS score0.22%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup allows Stored XSS.
This issue affects Geo Mashup: from n/a through 1.13.18.CVE-2026-78294dylan kuhngeo mashup+1EPSS score0.22%
Contributor Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions.CVE-2026-97250dylan kuhngeo mashup+1EPSS score0.15%
Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions.