Cpe:2.3:a:ayecode:geodirectory:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3aayecodegeodirectory/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 11 Nov 2026 16:07:09 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgAyeCode GeoDirectory: Reflected Cross-Site Scripting (CVE-2026-124250)https://feed.craftedsignal.io/briefs/2026-11-geodirectory-xss-cve-2026-124250/Wed, 11 Nov 2026 16:07:09 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-geodirectory-xss-cve-2026-124250/The AyeCode Ltd GeoDirectory component is vulnerable to Reflected Cross-Site Scripting (CVE-2026-124250) due to improper neutralization of input during web page generation.A Reflected Cross-Site Scripting vulnerability exists in the AyeCode Ltd GeoDirectory component (versions n/a through 2.8.202), caused by improper neutralization of input during web page generation.

Impact

The vulnerability allows for Reflected XSS.

Recommendation

Refer to the vendor advisory for patch information regarding CVE-2026-124250.

]]>highadvisory