Lucene search

K
osvGoogleOSV:GHSA-735V-WX75-XMMM
HistoryJan 27, 2022 - 6:27 p.m.

Cross-site Scripting in grav

2022-01-2718:27:56
Google
osv.dev
4

0.001 Low

EPSS

Percentile

21.6%

In grav prior to version 1.7.28, a low privilege user can create a page with arbitrary javascript by bypassing insufficent XSS filtering.

0.001 Low

EPSS

Percentile

21.6%