Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-26291 EUVD-2026-22834GHSA-w2qc-5jvx-3g3v

Stored cross-site scripting vulnerability exists in GROWI v7.4.6 and earlier. If this vulnerability is exploited, an arbitrary script may b…

Published Apr 15, 2026 · Updated Apr 15, 2026 · Assigned by jpcert

Vendor: GROWI Product: GROWI

Description

Stored cross-site scripting vulnerability exists in GROWI v7.4.6 and earlier. If this vulnerability is exploited, an arbitrary script may be executed in a user's web browser.

Affected products

VendorProductAffectedFixed
GROWI GROWI v7.4.6 and earlier —

References