Product
The AyeCode Ltd GeoDirectory component is vulnerable to Reflected Cross-Site Scripting (CVE-2026-124250) due to improper neutralization of input during web page generation.