CVE-2026-66449

Geo Mashup versions up to 1.13.18 are vulnerable to unauthenticated Cross Site Scripting (XSS), allowing attackers to inject malicious scripts into web pages viewed by users. This vulnerability can lead to session hijacking, data theft, or defacement of the affected web application. Organizations using these versions should prioritize immediate patching or mitigation strategies to protect their users and data integrity.