Paolo

9 CVEs across 1 Paolo products. Browse Paolo vulnerabilities, severities, and proof-of-concept exploits.

Paolo products with known CVEs

ProductCVEs
Geodirectory9
Paolo CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-66604High7.12026-08-20Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions.
CVE-2026-68565Medium6.52026-08-18Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions.
CVE-2026-57681Medium6.42026-07-02Subscriber Server Side Request Forgery (SSRF) in GeoDirectory <= 2.8.161 versions.
CVE-2026-54831Critical9.32026-06-26Unauthenticated SQL Injection in GeoDirectory <= 2.8.162 versions.
CVE-2026-39512Critical9.32026-06-15Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions.
CVE-2026-42671Medium6.52026-06-01Missing Authorization vulnerability in Paolo GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GeoDirec…
CVE-2026-24549Medium4.32026-01-23Cross-Site Request Forgery (CSRF) vulnerability in Paolo GeoDirectory geodirectory allows Cross Site Request Forgery.This issue affects GeoDirectory: from n/a…
CVE-2024-56259Medium6.52025-01-02Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This is…
CVE-2024-50437Medium6.52024-10-28Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This is…