High severity7.1NVD Advisory· Published Jan 8, 2026· Updated Apr 27, 2026
CVE-2025-67922
CVE-2025-67922
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Reflected XSS.This issue affects Grand Restaurant: from n/a through < 7.0.9.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:themegoods:grand_restaurant:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:themegoods:grand_restaurant:*:*:*:*:*:wordpress:*:*range: <7.0.9
- (no CPE)range: < 7.0.9
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.