Vulnerabilities

TI-2026-76571 CVE-2026-112249 · GHSA-vxcv-8gxv-hggx

Cross-site scripting in grandnode2 product descriptions

LOW 22

A vulnerability was detected in grandnode grandnode2 up to 2.3.0.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00398 Published 2026-10-19 Fixed in 2.4.0-beta, 2.4.0 CWE-79

TI-2026-76570 CVE-2026-112248 · GHSA-p292-jmx8-v7fj

Path traversal in grandnode2 Excel import of product pictures

LOW 24

A security vulnerability has been detected in grandnode grandnode2 up to 2.3.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.0059 Published 2026-10-19 Fixed in 2.4.0 CWE-22

TI-2019-09161 CVE-2019-12276 · GHSA-jf62-vqvf-vq54

A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in…

HIGH 67

A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows remote, unauthenticated attackers to retrieve arbitrary files on the web server via specially craft…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.60127 Published 2019-06-05 No fix listed CWE-22

Vulnerabilities

Filters

Cross-site scripting in grandnode2 product descriptions

Path traversal in grandnode2 Excel import of product pictures

A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in…