CVE-2026-55649

GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.0.3, document abstract metadata is stored without sanitization, allowing a low-privileged remote user to persist arbitrary HTML and JavaScript that executes in another...

CVE-2026-55649

The geospatial content management system GeoNode is vulnerable to a Stored Cross-Site Scripting (XSS) flaw in versions prior to 5.0.3 . The root cause is the lack of sanitization on the document abstract metadata field. This allows a low-privileged remote user to persist malicious HTML and JavaSc...