CVE-2026-55649

Name of the Vulnerable Software and Affected Versions GeoNode versions prior to 5.0.3

Description Document abstract metadata is stored without sanitization, which allows a low-privileged remote user to persist arbitrary HTML and JavaScript. This content executes in the browser of another user when the document page is visited, leading to a Stored Cross-Site Scripting (XSS) condition. Cross-Site Scripting is a type of security flaw where malicious scripts are injected into trusted websites.

Recommendations Update to version 5.0.3.