CVE-2026-26291
MEDIUM
NVD
CVSS Score
5.4
Severity
MEDIUM
Published
Apr 15, 2026
Vendor
unknown
Description
Stored cross-site scripting vulnerability exists in GROWI v7.4.6 and earlier. If this vulnerability is exploited, an arbitrary script may be executed in a user's web browser.