Skip to content
OpenAdvisories

Product · getgrav

grav-plugin-datamanager

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-100673

    Grav Data Manager before 1.4.5 Stored XSS via item-detail view

    The Grav Data Manager plugin (getgrav/grav-plugin-datamanager) versions 1.0.1 through 1.4.4 render stored data entries in the item-detail view (admin/templates/partials/item.html.twig) without escaping, applying Twig's `raw` filter — in some cases after a str…

    getgrav grav-plugin-datamanager