Paolo Geodirectory vulnerabilities

3 known vulnerabilities affecting paolo/geodirectory.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM3

Vulnerabilities

Page 1 of 1

CVE-2026-24549MEDIUMCVSS 4.3≤ 2.8.1492026-01-23

CVE-2026-24549 [MEDIUM] CWE-352 CVE-2026-24549: Cross-Site Request Forgery (CSRF) vulnerability in Paolo GeoDirectory geodirectory allows Cross Site Cross-Site Request Forgery (CSRF) vulnerability in Paolo GeoDirectory geodirectory allows Cross Site Request Forgery.This issue affects GeoDirectory: from n/a through <= 2.8.149.

CVE-2024-56259MEDIUMCVSS 5.4≤ 2.3.842025-01-02

CVE-2024-56259 [MEDIUM] CWE-79 CVE-2024-56259: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This issue affects GeoDirectory: from n/a through <= 2.3.84.

CVE-2024-50437MEDIUMCVSS 5.4≤ 2.3.802024-10-28

CVE-2024-50437 [MEDIUM] CWE-79 CVE-2024-50437: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This issue affects GeoDirectory: from n/a through <= 2.3.80.