Description
Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Paolo | GeoDirectory | ≤ 2.8.173 | — |
High · 7.1
CVE-2026-66604
EUVD-2026-63343GHSA-qxvh-2mjx-7wp3
WordPress GeoDirectory plugin <= 2.8.173 - Cross Site Scripting (XSS) vulnerability
Published Aug 20, 2026 · Updated Aug 20, 2026 · Assigned by Patchstack