Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-6060 EUVD-2025-22987GHSA-77j8-jpqg-v9f6

XSS in DECE Software's Geodi

Published Jul 29, 2025 · Updated Jun 5, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in DECE Software Geodi allows Cross-Site Scripting (XSS).

This issue affects Geodi: before GEODI Setup 9.0.146.

Affected products

VendorProductAffectedFixed
DECE Software Geodi < GEODI Setup 9.0.146 GEODI Setup 9.0.146

References