A vulnerability was found in GROWI up to 7.4.6. It has been declared as problematic. Affected is an unknown function. Executing a manipulation can lead to cross site scripting.
The identification of this vulnerability is CVE-2026-26291. The attack may be launched remotely. There is no exploit available.
