4 matches found
CVE-2026-58205
GRR is a resource management and reservation application. Prior to version 4.5.0, maj.php reflects the forcemaj parameter without adequate escaping when installation files remain accessible. Removal of these files is not automatic. An attacker can craft a URL that executes arbitrary JavaScript in...
EUVD-2026-111407
GRR is a resource management and reservation application. Prior to version 4.5.0, maj.php reflects the forcemaj parameter without adequate escaping when installation files remain accessible. Removal of these files is not automatic. An attacker can craft a URL that executes arbitrary JavaScript in...
CVE-2026-58205
The resource management and reservation application GRR is vulnerable to Reflected Cross-Site Scripting (XSS) in versions prior to 4.5.0 . The issue exists in the maj.php component, where the forcemaj parameter is reflected without adequate escaping if installation files remain accessible. An att...
CVE-2026-58205 GRR has a Reflected XSS issue
GRR is a resource management and reservation application. Prior to version 4.5.0, maj.php reflects the forcemaj parameter without adequate escaping when installation files remain accessible. Removal of these files is not automatic. An attacker can craft a URL that executes arbitrary JavaScript in...