CVE-2026-94161: WordPress Grand Restaurant theme < 7.0.11 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Reflected XSS.This issue affects Grand Restaurant: from n/a before 7.0.11.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Grand Restaurant themeto a version that resolves this vulnerability.Fixed in 7.0.11
Event History
Frequently Asked Questions
Which installations are affected?
Grand Restaurant versions earlier than 7.0.11 are affected. The available information does not identify any configuration prerequisite or unaffected earlier release.
What does exploitation require?
The vulnerability is remotely reachable, has low attack complexity, and requires no attacker privileges. Exploitation requires user interaction, meaning a victim must be induced to access attacker-controlled content or a crafted request.
What is the potential impact?
Successful exploitation may affect confidentiality, integrity, and availability at low impact levels. The scope is changed, indicating the vulnerable theme can affect resources beyond its own security authority.
How should this be remediated?
Update the Grand Restaurant theme to version 7.0.11 or later. The supplied data does not provide a workaround for installations that cannot be updated immediately.