CVE-2026-68565

MediumCVSS 6.5

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile - higher than 6% of all known CVEs

Cross Site Scripting (XSS) vulnerability in GeoDirectory versions up to 2.8.172. The attack requires contributor-level privileges.

A contributor can inject malicious scripts, potentially leading to session theft, account takeover, or other attacks on users.

Update the GeoDirectory plugin to the latest version that includes the fix.

Original NVD description (English source)

Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions.