Dylan Kuhn Geo Mashup
8 CVEs affecting Dylan Kuhn Geo Mashup. Latest disclosed: 2026-09-17. Critical: 1, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-48293 | Critical | 9.8 | 2025-08-14 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allo… |
CVE-2026-48967 | High | 8.5 | 2026-06-17 | Subscriber SQL Injection in Geo Mashup <= 1.13.19 versions. |
CVE-2026-66450 | High | 8.1 | 2026-08-13 | Unauthenticated Local File Inclusion in Geo Mashup <= 1.13.18 versions. |
CVE-2026-66449 | High | 7.1 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.18 versions. |
CVE-2026-42734 | High | 7.1 | 2026-05-27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.Th… |
CVE-2026-78294 | Medium | 6.5 | 2026-09-17 | Contributor Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions. |
CVE-2026-27427 | Medium | 6.5 | 2026-05-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup allows Stored XSS. This issue affe… |
CVE-2024-44008 | Medium | 6.5 | 2024-09-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Stored XSS.This… |