CVE-2026-24370 is a stored XSS vulnerability in Theme-one The Grid (the-grid) affecting versions before 2.8.0. The issue arises from improper input sanitization during web page generation, enabling attackers with limited privileges and requiring user interaction to inject and execute malicious scripts. The vulnerability has a CVSS 3.1 base score of 6.5, indicating moderate severity with impacts on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to information disclosure, modification of data, or disruption of service. The attack requires user interaction and privileges to inject the payload, limiting its ease of exploitation.

No official patch or remediation is currently documented. Users should monitor the vendor's advisory for updates and apply any official fixes when available. Until then, consider restricting user input or employing web application firewalls to mitigate potential exploitation.