Skip to content
Sign in
7.1 High

CVE-2025-67952 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Tour grandtour allows Reflected XSS.This issue affects Grand Tour: from n/a through < 5.6.2.

Affected products and versions

Product Affected versions Fixed in
Grand Tour 5.6 earliest → 5.6.2 No fix stated

Other CVEs of Grand Tour

The 3 CVEs of Grand Tour →
CVE-2026-66652 Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Tour allows Cross Site Request Forgery 5.4 Medium CVE-2025-39485 Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Tour grandtour allows Object Injection.This issue… 9.8 Critical
Track this CVE