Threat database

10 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.2%	CVE-2026-111848Geo Mashup · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Dylan Kuhn… High7.1EPSS 0.2%2026-10-21CVE Database V5CVE-2026-111848 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.This issue affects Geo Mashup: from n/a through 1.13.22. EPSS 0.2%Vulnerability Dylan Kuhn	CVE Database V5	2026-10-21
High	7.1	EPSS 0.1%	CVE-2026-97250Geo Mashup · Cross-site Scripting High7.1EPSS 0.1%2026-09-30CVE Database V5CVE-2026-97250 Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions. EPSS 0.1%Vulnerability Dylan Kuhn #cwe-79	CVE Database V5	2026-09-30
Medium	6.5	EPSS 0.2%	CVE-2026-78294Geo Mashup · Cross-site Scripting Medium6.5EPSS 0.2%2026-09-17CVE Database V5CVE-2026-78294 Contributor Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions. EPSS 0.2%Vulnerability Dylan Kuhn #cwe-79	CVE Database V5	2026-09-17
High	8.1	EPSS 0.5%	CVE-2026-66450Geo Mashup · PHP Remote File Inclusion High8.1EPSS 0.5%2026-08-13CVE Database V5CVE-2026-66450 Unauthenticated Local File Inclusion in Geo Mashup <= 1.13.18 versions. EPSS 0.5%Vulnerability Dylan Kuhn #cwe-98 #ghsa-mqmh-wh52-p9gx	CVE Database V5	2026-08-13
High	7.1	EPSS 0.3%	CVE-2026-66449Geo Mashup · Cross-site Scripting High7.1EPSS 0.3%2026-08-13CVE Database V5CVE-2026-66449 Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.18 versions. EPSS 0.3%Vulnerability Dylan Kuhn #cwe-79	CVE Database V5	2026-08-13
High	8.5	EPSS 0.4%	CVE-2026-48967Geo Mashup · SQL Injection High8.5EPSS 0.4%2026-06-17CVE Database V5CVE-2026-48967 CVE-2026-48967 is a high severity SQL Injection vulnerability affecting Dylan Kuhn's Geo Mashup plugin versions up to and including 1.13.19. The flaw involves improper neutralization of special elements in SQL commands, allowing an attacker with low privileges to execute crafted SQL queries. This vulnerability can lead to a complete compromise of confidentiality and partial denial of service. No official patch or remediation guidance is currently available. EPSS 0.4%Vulnerability Dylan Kuhn #cwe-89	CVE Database V5	2026-06-17
High	7.1	EPSS 0.3%	CVE-2026-42734Geo Mashup · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Dylan Kuhn Geo… High7.1EPSS 0.3%2026-05-27CVE Database V5CVE-2026-42734 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.This issue affects Geo Mashup: from n/a through <= 1.13.19. EPSS 0.3%Vulnerability Dylan Kuhn	CVE Database V5	2026-05-27
Medium	6.5	EPSS 0.2%	CVE-2026-27427Geo Mashup · Cross-site Scripting Medium6.5EPSS 0.2%2026-05-26CVE Database V5CVE-2026-27427 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup allows Stored XSS. This issue affects Geo Mashup: from n/a through 1.13.18. EPSS 0.2%Vulnerability Dylan Kuhn #cwe-79	CVE Database V5	2026-05-26
Critical	9.8	EPSS 0.4%	CVE-2025-48293Geo Mashup · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… Critical9.8EPSS 0.4%2025-08-14CVE Database V5CVE-2025-48293 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows PHP Local File Inclusion.This issue affects Geo Mashup: from n/a through <= 1.13.16. EPSS 0.4%Vulnerability Dylan Kuhn	CVE Database V5	2025-08-14
Medium	6.5	EPSS 0.3%	CVE-2024-44008Geo Mashup · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Dylan Kuhn Geo… Medium6.5EPSS 0.3%2024-09-17CVE Database V5CVE-2024-44008 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Stored XSS.This issue affects Geo Mashup: from n/a through <= 1.13.12. EPSS 0.3%Vulnerability Dylan Kuhn	CVE Database V5	2024-09-17

Showing 1–10 of 10 results