Lucene search

K
osvGoogleOSV:GHSA-977G-93F5-RQJX
HistoryMay 14, 2022 - 3:31 a.m.

Grav CMS Cross-site scripting (XSS) vulnerability

2022-05-1403:31:31
Google
osv.dev
6
grav cms
cross-site scripting
twig.php
remote attackers
path_info
admin tools

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

69.3%

Cross-site scripting (XSS) vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin/tools.

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

69.3%