PatchTheCVE: grand restauranthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-67922: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoohttps://patchthecve.com/cve/CVE-2025-67922.htmlhttps://patchthecve.com/cve/CVE-2025-67922.htmlWed, 07 Oct 2026 09:10:00 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Reflected XSS.This issue affects Grand Restaurant: from n/a through < 7.0.9.CVE-2025-39352: Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrecthttps://patchthecve.com/cve/CVE-2025-39352.htmlhttps://patchthecve.com/cve/CVE-2025-39352.htmlWed, 17 Jun 2026 09:17:48 +0000HIGH 8.2: Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Restaurant: from n/a through <= 7.0.CVE-2025-39348: Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object Ihttps://patchthecve.com/cve/CVE-2025-39348.htmlhttps://patchthecve.com/cve/CVE-2025-39348.htmlWed, 17 Jun 2026 09:17:48 +0000CRITICAL 9.8: Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object Injection.This issue affects Grand Restaurant: from n/a through <= 7.0.CVE-2025-32926: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeGoods Grahttps://patchthecve.com/cve/CVE-2025-32926.htmlhttps://patchthecve.com/cve/CVE-2025-32926.htmlWed, 17 Jun 2026 09:12:49 +0000CRITICAL 9.8: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Path Traversal.This issue affects Grand Restaurant: from n/a through <= 7.0.CVE-2025-39353: Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrecthttps://patchthecve.com/cve/CVE-2025-39353.htmlhttps://patchthecve.com/cve/CVE-2025-39353.htmlWed, 17 Jun 2026 09:17:48 +0000MEDIUM 5.3: Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Restaurant: from n/a through <= 7.0.CVE-2025-39351: Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Cross Sihttps://patchthecve.com/cve/CVE-2025-39351.htmlhttps://patchthecve.com/cve/CVE-2025-39351.htmlWed, 17 Jun 2026 09:17:48 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Cross Site Request Forgery.This issue affects Grand Restaurant: from n/a through <= 7.0.