Skip to content
Sign in
5.4 Medium

CVE-2026-66652 Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Tour allows Cross Site Request Forgery

Description

Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Tour allows Cross Site Request Forgery. This issue affects Grand Tour: from n/a through 5.5.1.

Affected products and versions

Product Affected versions Fixed in
Grand Tour 5.5 earliest → 5.5.1 No fix stated

Other CVEs of Grand Tour

The 3 CVEs of Grand Tour →
CVE-2025-67952 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand… 7.1 High CVE-2025-39485 Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Tour grandtour allows Object Injection.This issue… 9.8 Critical
Track this CVE