Skip to content
OpenAdvisories

Product · getgrav

grav-plugin-admin2

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.4

    Grav Admin before 2.0.21 Stored XSS via username

    Grav Admin (getgrav/grav-plugin-admin2) versions <= 2.0.19 contain a stored cross-site scripting vulnerability in the tHtml() function (src/lib/stores/i18n.svelte.ts), which substitutes untrusted parameters such as usernames into translation templates before …