CVE-2026-112249 | grandnode grandnode2 up to 2.3.0 Product Description Product.Layout.Simple.cshtml Html.Raw cross site scripting (GHSA-cvpg-48r9-fq67)

October 19, 2026 Yanac

A vulnerability described as problematic has been identified in grandnode grandnode2 up to 2.3.0. Affected is the function Html.Raw of the file src/Web/Grand.Web/Views/Product/Product.Layout.Simple.cshtml of the component Product Description Handler. The manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-112249. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More