Vulnerability GHSA-r4hm-p9f9-fj9v
Medium Risk
MEDIUM RISK
CVSS Score: 6.3
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
20 hours ago
November 06, 2026 at 07:50 PM UTC
GeoNode has Stored XSS in Documents metadata abstract field
2.0.dev20130913181950 - 5.0.2
2.0.dev20130913181950 - 5.0.2
Summary
GeoNode has Stored XSS in Documents metadata abstract field
Details
The abstract metadata of documents is not sanitised. It’s possible to store arbitrary HTML (and JS) that will be executed when visiting the page.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
20 hours ago
GeoNode has Unrestricted File Upload
2.0.dev20130913181950 - 5.0.2 GHSA-fqpv-mq26-pr4j
2.0.dev20130913181950 - 5.0.2 GHSA-fqpv-mq26-pr4j
High Risk
20 hours ago
GeoNode has OS command injection via uploaded file layer name
2.0.dev20130913181950 - 5.0.3.post1 GHSA-9fpx-fr6j-2vh6
2.0.dev20130913181950 - 5.0.3.post1 GHSA-9fpx-fr6j-2vh6
Medium Risk
3 months ago
GeoNode: Stored XSS to full account takeover
3.2.1 - 4.2.2 GHSA-rwcv-whm8-fmxm
3.2.1 - 4.2.2 GHSA-rwcv-whm8-fmxm
Medium Risk
5 months ago
GeoNode contains a server-side request forgery vulnerability in the service registration endpoint
4.0.0 - 4.4.4 and 5.0.0 - 5.0.1 GHSA-hw9r-6m78-w6h3
4.0.0 - 4.4.4 and 5.0.0 - 5.0.1 GHSA-hw9r-6m78-w6h3
Medium Risk
7 months ago
No summary available
4.0.0 - 4.4.4 and 5.0.0 - 5.0.1 PYSEC-2026-2159
4.0.0 - 4.4.4 and 5.0.0 - 5.0.1 PYSEC-2026-2159
Impacted packages
Timeline
Published
20 hours ago
November 06, 2026 at 07:50 PM UTC
Last Modified
19 hours ago
November 06, 2026 at 08:00 PM UTC