CveMateVulnerability intelligence

Paolo vulnerabilities

11 vulnerabilities

Known vulnerabilities in Paolo products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1

Geodirectory11 vulnerabilities

CVE-2024-56259ayecodegeodirectory+21y ago02-01-2025 12:01

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This issue affects GeoDirectory: from n/a through <= 2.3.84.CVE-2024-50437ayecodegeodirectory+21y ago28-10-2024 18:11

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This issue affects GeoDirectory: from n/a through <= 2.3.80.CVE-2026-54831paologeodirectory+13mo ago26-06-2026 14:52

Unauthenticated SQL Injection in GeoDirectory <= 2.8.162 versions.CVE-2026-84813paologeodirectory+11mo ago03-09-2026 16:31

Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions.CVE-2026-68565paologeodirectory+12mo ago18-08-2026 13:59

Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions.CVE-2026-42671paologeodirectory+14mo ago01-06-2026 15:28

Missing Authorization vulnerability in Paolo GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GeoDirectory: from n/a through 2.8.157.CVE-2026-39512paologeodirectory+14mo ago15-06-2026 20:17

Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions.CVE-2026-66604paologeodirectory+12mo ago20-08-2026 12:07

Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions.CVE-2026-57681paologeodirectory+13mo ago02-07-2026 11:15

Subscriber Server Side Request Forgery (SSRF) in GeoDirectory <= 2.8.161 versions.CVE-2026-24549paologeodirectory+19mo ago23-01-2026 14:28

Cross-Site Request Forgery (CSRF) vulnerability in Paolo GeoDirectory geodirectory allows Cross Site Request Forgery.This issue affects GeoDirectory: from n/a through <= 2.8.149.CVE-2026-81271paologeodirectory+11mo ago27-08-2026 09:00

Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions.