7.1
High
CVE-2026-94161 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Reflected XSS.This issue affects Grand Restaurant: from n/a before 7.0.11.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Grand Restaurant 7.0 | earliest → < 7.0.11 | 7.0.11 |
Other CVEs of Grand Restaurant
The 8 CVEs of Grand Restaurant →
CVE-2026-23542
Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object…
9.8
Critical
CVE-2025-67922
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand…
7.1
High
CVE-2025-32926
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeGoods Grand…
9.8
Critical
CVE-2025-39348
Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object…
9.8
Critical