CVE-2026-82664

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-82664

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82664.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-82664

Published

2026-08-31T08:00:13.221Z

Modified

2026-09-03T03:30:51.884729138Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

yaojingang GEOFlow JSON-LD Theme HomeController.php cross site scripting

Details

A security vulnerability has been detected in yaojingang GEOFlow up to 2.1.0. This affects an unknown part of the file app/Http/Controllers/Site/HomeController.php of the component JSON-LD Theme Handler. The manipulation of the argument Search leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 2.1.1 is able to mitigate this issue. The identifier of the patch is 67abfd864a15d169a78429f3290c91cb3b93e849. Upgrading the affected component is recommended.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82664.json",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "2.0"
                },
                {
                    "last_affected": "2.0"
                },
                {
                    "introduced": "2.1.0"
                },
                {
                    "last_affected": "2.1.0"
                }
            ]
        }
    ],
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-79",
        "CWE-94"
    ]
}

References

Affected packages

Git / github.com/yaojingang/geoflow

Affected ranges

Type

GIT

Repo

https://github.com/yaojingang/geoflow

Events

Introduced

Fixed

67abfd864a15d169a78429f3290c91cb3b93e849

Fixed

212e80de88c4a9941105b7e66dcf31778d0f6225

Database specific

Show details

{
    "source": "REFERENCES"
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82664.json"