Description
grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| getgrav | getgrav/grav-plugin-admin | unspecified – < 1.10.25 | 1.10.25 |
Medium · 4.6
CVE-2021-3920
EUVD-2021-27138GHSA-86p4-m52q-r4qx
Cross-site Scripting (XSS) - Stored in getgrav/grav-plugin-admin
Published Nov 19, 2021 · Updated Aug 3, 2024 · Assigned by @huntrdev