Description
Grav through 1.6.15 allows (Stored) Cross-Site Scripting due to JavaScript execution in SVG images.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | getgrav/grav | < 1.7.0-beta.8 | 1.7.0-beta.8 | GHSA-6268-v434-45m5 |
Medium · 6.1
CVE-2019-16126
EUVD-2019-0730GHSA-6268-v434-45m5
Cross-site Scripting in Grav
Published Sep 9, 2019 · Updated Aug 5, 2024 · Assigned by mitre