Vendor

getgrav

213 known vulnerabilities.

Products

grav 159 grav-plugin-api 18 getgrav/grav 8 grav-plugin-login 7 grav-plugin-form 5 grav-plugin-admin 3 grav-plugin-shortcode-core 2 getgrav/grav-plugin-admin 2 grav-plugin-flex-objects 2 grav-plugin-guestbook 2 grav-plugin-comments 1 grav-plugin-data-manager 1 grav-plugin-star-ratings 1 grav-plugin-login-oauth 1 Grav CMS Admin Plugin 1 grav-plugin-datamanager 1 grav-plugin-admin2 1 GravCMS 1

All Critical High Medium Low Exploited only Public exploit

85 results · Clear filters · Feed

Medium 5.7

CVE-2022-0268

Cross-site Scripting (XSS) - Stored in getgrav/grav

Cross-site Scripting (XSS) - Stored in Packagist getgrav/grav prior to 1.7.28.

getgrav getgrav/grav getgrav/grav Packagist

Jan 25, 2022
Medium 4.6

CVE-2021-3920

Cross-site Scripting (XSS) - Stored in getgrav/grav-plugin-admin

grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

getgrav getgrav/grav-plugin-admin

Nov 19, 2021
Medium 6.3

CVE-2021-3904

Cross-site Scripting (XSS) - Stored in getgrav/grav

grav is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

getgrav getgrav/grav getgrav/grav Packagist

Oct 27, 2021
Medium 6.3

CVE-2021-3818

Reliance on Cookies without Validation and Integrity Checking in getgrav/grav

grav is vulnerable to Reliance on Cookies without Validation and Integrity Checking

getgrav getgrav/grav getgrav/grav Packagist

Sep 27, 2021
Medium 5.4

CVE-2021-3799

Improper Restriction of Rendered UI Layers or Frames in getgrav/grav-plugin-admin

grav-plugin-admin is vulnerable to Improper Restriction of Rendered UI Layers or Frames

getgrav getgrav/grav-plugin-admin

Sep 27, 2021