Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Grimmory is a self-hosted digital library. Prior to version 2.3.1, a stored cross-site scripting (XSS) vulnerability in Grimmory's browser-based EPUB reader allows an attacker to embed arbitrary JavaScript in a crafted EPUB file. When a victim opens the book, the script executes in their browser with full access to the Grimmory application's session context. This can enable session token theft and account takeover, including administrative access if an administrator opens the affected book. This issue has been patched in version 2.3.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-42451 Grimmory is a self-hosted digital library. Prior to version 2.3.1, a stored cross-site scripting (XSS) vulnerability in Grimmory's browser-based EPUB reader allows an… https://www.cve.org/CVERecord?id=CVE-2026-42451
Post summary
The text announces a stored XSS flaw (CVE-2026-42451) affecting Grimmory prior to version 2.3.1, with no evidence of exploitation or patch information.
CVE-2026-42451 Stored Cross-Site Scripting in Grimmory EPUB Reader Prior to Version 2.3.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42451
Post summary
The text announces a stored XSS vulnerability in Grimmory EPUB Reader before version 2.3.1, detailing the affected product and vulnerability type.