CVE-2021-3904

2021-10-2722:15:07

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

grav is vulnerable to Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)

CPENameOperatorVersion
graveq1.4.5
graveq1.6.0-rc.3
graveq1.7.0-beta.1
graveq1.1.0
graveq1.5.2
graveq1.7.3
graveq1.0.7
graveq1.6.0-beta.3
graveq0.9.39
graveq0.9.19

Name	Operator	Version
grav	eq	1.4.5
grav	eq	1.6.0-rc.3
grav	eq	1.7.0-beta.1
grav	eq	1.1.0
grav	eq	1.5.2
grav	eq	1.7.3
grav	eq	1.0.7
grav	eq	1.6.0-beta.3
grav	eq	0.9.39
grav	eq	0.9.19

Rows per page:

1-10 of 2411

References

github.com/getgrav/grav/commit/afc69a3229bb6fe120b2c1ea27bc6f196ed7284d

huntr.dev/bounties/b1182515-d911-4da9-b4f7-b4c341a62a8d