Paolo Geodirectory vulnerabilities
11 vulnerabilities
Known vulnerabilities in Paolo Geodirectory, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-56259ayecodegeodirectory+2
EPSS score0.34%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This issue affects GeoDirectory: from n/a through <= 2.3.84.CVE-2024-50437ayecodegeodirectory+2EPSS score0.26%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This issue affects GeoDirectory: from n/a through <= 2.3.80.CVE-2026-54831paologeodirectory+1EPSS score0.40%
Unauthenticated SQL Injection in GeoDirectory <= 2.8.162 versions.CVE-2026-84813paologeodirectory+1EPSS score0.40%
Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions.CVE-2026-68565paologeodirectory+1EPSS score0.22%
Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions.CVE-2026-42671paologeodirectory+1EPSS score0.33%
Missing Authorization vulnerability in Paolo GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects GeoDirectory: from n/a through 2.8.157.CVE-2026-39512paologeodirectory+1EPSS score0.40%
Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions.CVE-2026-66604paologeodirectory+1EPSS score0.25%
Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions.CVE-2026-57681paologeodirectory+1EPSS score0.23%
Subscriber Server Side Request Forgery (SSRF) in GeoDirectory <= 2.8.161 versions.CVE-2026-24549paologeodirectory+1EPSS score0.15%
Cross-Site Request Forgery (CSRF) vulnerability in Paolo GeoDirectory geodirectory allows Cross Site Request Forgery.This issue affects GeoDirectory: from n/a through <= 2.8.149.CVE-2026-81271paologeodirectory+1EPSS score0.20%
Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions.