CVE-2018-5233

2018-03-1921:29:00

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.4%

JSON

Cross-site scripting (XSS) vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin/tools.

CPENameOperatorVersion
graveq0.9.20
graveq1.1.5
graveq1.2.2
graveq1.0.0
graveq0.9.7
graveq0.9.25
graveq0.9.14
graveq1.1.9-rc.3
graveq1.1.9-rc.2
graveq0.9.32