Dylan Kuhn Geo Mashup
12 CVEs affecting Dylan Kuhn Geo Mashup. Latest disclosed: 2026-10-26. Critical: 1, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-48293 | Critical | 9.8 | 2025-08-14 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allo… |
CVE-2026-48967 | High | 8.5 | 2026-06-17 | Subscriber SQL Injection in Geo Mashup <= 1.13.19 versions. |
CVE-2026-66450 | High | 8.1 | 2026-08-13 | Unauthenticated Local File Inclusion in Geo Mashup <= 1.13.18 versions. |
CVE-2026-111848 | High | 7.1 | 2026-10-21 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.Th… |
CVE-2026-97250 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions. |
CVE-2026-66449 | High | 7.1 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.18 versions. |
CVE-2026-42734 | High | 7.1 | 2026-05-27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.Th… |
CVE-2026-115953 | Medium | 6.5 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Stored XSS.This… |
CVE-2026-78294 | Medium | 6.5 | 2026-09-17 | Contributor Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions. |
CVE-2026-27427 | Medium | 6.5 | 2026-05-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup allows Stored XSS. This issue affe… |
CVE-2024-44008 | Medium | 6.5 | 2024-09-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Stored XSS.This… |
CVE-2026-115954 | Medium | 5.4 | 2026-10-26 | Missing Authorization vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |