CVE-2026-68565

GeoDirectory versions up to 2.8.172 are vulnerable to a Contributor Cross Site Scripting (XSS) flaw, which could allow attackers to inject malicious scripts into web pages viewed by users. This vulnerability poses a medium risk as it can lead to unauthorized actions on behalf of users or data theft. Organizations using affected versions should prioritize patching to mitigate potential exploitation risks.