WordPress Grand Car Rental theme <= 3.7 - Cross Site Scripting (XSS) vulnerability

Description

Unauthenticated Cross Site Scripting (XSS) in Grand Car Rental <= 3.7 versions.

Vendor	Product	Versions
themegoods	grand car rental	n/a

Tier C

VulDB27d ago

→ No new info (linked only)

CVSS 3.17.1 HIGH

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

CISA KEV❌ No

Actively exploited❌ No

CWECWE-79

PublishedJun 16, 2026

Last enriched27d agov2

Trending Score1

Source articles1

Independent1

Info Completeness8/14

Missing: epss, kev, exploit, patch, iocs, mitre_attack

0 upvotes0 downvotes

Last enriched 27d ago

v2Tier C27d ago

Updated description with more technical detail and clarified that there is no available exploit.

description

via VulDB

v127d ago

Initial creation