CVE-2026-113488: GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'cta' Attribute

Q: Who can exploit this issue and who is affected by the payload?

A user with the Contributor role or higher can create the stored payload. It executes against anyone who clicks the affected badge, including administrators.

Q: What user interaction is required for exploitation?

The target must click the badge containing the malicious cta attribute. The available information does not indicate that merely viewing the badge triggers execution.

Q: Which versions should be remediated?

GeoDirectory versions before 2.8.196 are affected. Update to version 2.8.196 or later.

Published Oct 28, 2026

Updated

The GeoDirectory WordPress plugin before 2.8.196 does not properly escape a post badge shortcode attribute for a JavaScript context before placing it in an inline event handler, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks against anyone who clicks the badge, including administrators.

Affected Software

1 affected component

GeoDirectory GeoDirectory<2.8.196

Event History

Oct 28, 2026

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionWeakness

Frequently Asked Questions

Who can exploit this issue and who is affected by the payload?

A user with the Contributor role or higher can create the stored payload. It executes against anyone who clicks the affected badge, including administrators.

What user interaction is required for exploitation?

The target must click the badge containing the malicious cta attribute. The available information does not indicate that merely viewing the badge triggers execution.

Which versions should be remediated?

GeoDirectory versions before 2.8.196 are affected. Update to version 2.8.196 or later.

CVE-2026-113488: GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'cta' Attribute

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue and who is affected by the payload?

What user interaction is required for exploitation?

Which versions should be remediated?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue and who is affected by the payload?

What user interaction is required for exploitation?

Which versions should be remediated?