https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T22:45:41.558223+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-112249 CVE-2026-112249 — grandnode grandnode2 Product Description Product.Layout.Simple.cshtml Html.Raw cross site scripting 2026-10-20T22:45:41.559011+00:00

Affected: grandnode2

A vulnerability was detected in grandnode grandnode2 up to 2.3.0. Affected is the function Html.Raw of the file src/Web/Grand.Web/Views/Product/Product.Layout.Simple.cshtml of the component Product Description Handler. The manipulation results in cross site scripting. The attack can be launched remotely. Upgrading to version 2.4.0-beta and 2.4.0 is able to address this issue. The patch is identified as 41a8e349eab8d9641cf6ea800d738f2d8991ca22. Upgrading the affected component is recommended. The vendor was contacted early about this disclosure.