getgrav/grav

47 results · Clear filters · Feed

• Medium 5.7
  CVE-2022-0268

  Cross-site Scripting (XSS) - Stored in getgrav/grav

  Cross-site Scripting (XSS) - Stored in Packagist getgrav/grav prior to 1.7.28.

  getgrav getgrav/grav getgrav/grav Packagist
  Jan 25, 2022
• Medium 6.3
  CVE-2021-3904

  Cross-site Scripting (XSS) - Stored in getgrav/grav

  grav is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  getgrav getgrav/grav getgrav/grav Packagist
  Oct 27, 2021
• Medium 6.3
  CVE-2021-3818

  Reliance on Cookies without Validation and Integrity Checking in getgrav/grav

  grav is vulnerable to Reliance on Cookies without Validation and Integrity Checking

  getgrav getgrav/grav getgrav/grav Packagist
  Sep 27, 2021
• Medium 5.5
  CVE-2020-29556

  Grav CMS Local File Injection

  The Backup functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to read arbitrary local files on the underlying server by exploiting a path-traversal technique. (This vulnerability can also be exploited by an unauthenticated attacker…

  getgrav/grav Packagist
  Mar 15, 2021
• Medium 6.1
  CVE-2020-11529 Scanner template EPSS 11%

  Open Redirect in Grav

  Common/Grav.php in Grav before 1.7 has an Open Redirect. This is partially fixed in 1.6.23 and still present in 1.6.x.

  getgrav/grav Packagist
  Apr 4, 2020
• Medium 6.1
  CVE-2019-16126

  Cross-site Scripting in Grav

  Grav through 1.6.15 allows (Stored) Cross-Site Scripting due to JavaScript execution in SVG images.

  getgrav/grav Packagist
  Sep 9, 2019
• Medium 6.1
  CVE-2018-5233 Scanner template

  Grav CMS Cross-site scripting (XSS) vulnerability

  Cross-site scripting (XSS) vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin/tools.

  getgrav/grav Packagist
  Mar 19, 2018