Most recent entries from all

EUVD-2026-291452

fkie_cve-2026-26291

Stored cross-site scripting vulnerability exists in GROWI v7.4.6 and earlier. If this vulnerability is exploited, an arbitrary script may be executed in a user's web browser.

GHSA-w2qc-5jvx-3g3v

Stored cross-site scripting vulnerability exists in GROWI v7.4.6 and earlier. If this vulnerability is exploited, an arbitrary script may be executed in a user's web browser.

jvndb-2026-000055

GROWI provided by GROWI, Inc. contains the following vulnerability.<a href='https://cwe.mitre.org/data/definitions/79.html' target='_blank'></a><ul><li>Stored cross-site scripting (CWE-79) - CVE-2026-26291</li></ul>Norihide Saito reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.