GeoNode versions prior to 5.0.3 contain a stored cross-site scripting (XSS) vulnerability in the documents metadata abstract field. This field does not sanitize input, allowing attackers to store arbitrary HTML and JavaScript that executes when the page is viewed. The vulnerability has a CVSS score of 6.3 (medium severity) and is fixed in version 5.0.3.