CVE-2026-61965

GeekyBot versions up to 1.2.6 are vulnerable to unauthenticated Cross Site Scripting (XSS), allowing attackers to inject malicious scripts into web pages viewed by users. This vulnerability poses a significant risk as it can lead to session hijacking, data theft, or defacement of the application. Organizations using affected versions should prioritize patching to mitigate potential exploitation.