Skip to content
OpenAdvisories

Package · Packagist

getgrav/grav-plugin-form

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.7
    CVE-2026-42845

    Grav: Anonymous Page Content Overwrite via Form File Upload filename Override

    The form plugin for Grav adds the ability to create and use forms. Prior to 9.1.0 , there is an unauthenticated page-content overwrite via file upload (GHSA-w4rc-p66m-x6qq). Public form uploads now strip path components from the POST-supplied filename and har…

    getgrav grav-plugin-form getgrav/grav-plugin-form Packagist