2187 matches found
PT-2025-48571
Name of the Vulnerable Software and Affected Versions Grav versions prior to 1.11.0-beta.1 Description The Grav admin plugin, an HTML user interface for configuring Grav and managing pages, contains a Stored Cross-Site Scripting XSS issue. The vulnerability exists in the...
Grav 安全漏洞
Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. Grav suffers from a user enumeration and email disclosure vulnerability that can be exploited by attackers to enumerate users and disclose sensitive email...
PT-2025-48569
Name of the Vulnerable Software and Affected Versions Grav versions prior to 1.11.0-beta.1 Description The Grav admin plugin, an HTML user interface for configuring Grav and managing pages, contains a Stored Cross-Site Scripting XSS issue. An attacker can inject malicious scripts into the...
Grav 安全漏洞
Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. Grav suffers from a denial of service vulnerability that stems from insufficient input validation, which can be exploited by an attacker to cause a denial...
Grav 授权问题漏洞
Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. Grav suffers from an authorization issue vulnerability that stems from improper authorization checking, which can be exploited by an attacker to cause for...
PT-2025-48561
Name of the Vulnerable Software and Affected Versions Grav versions prior to 1.8.0-beta.27 Description Grav CMS contains a path traversal flaw. Authenticated attackers with administrative privileges can read arbitrary files on the server filesystem. This is due to inadequate input sanitization...
CVE-2025-66311: Improper Neutralization of Input During Web Page Generation
This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a Stored Cross-Site Scripting XSS vulnerability was identified in the /admin/pages/page endpoint of the Grav application. This...
Grav CMS Cross-Site Scripting Vulnerability
Grav CMS is a modern, lightweight content management system CMS with a file-driven architecture that runs without relying on traditional databases. Grav CMS suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplie...
CVE-2025-63593
Grav CMS1.7.49.5 is vulnerable to Cross Site Scripting XSS...
CVE-2025-63593
Grav CMS1.7.49.5 is vulnerable to Cross Site Scripting XSS...
Grav CMS 安全漏洞
Grav CMS is a modern, lightweight content management system CMS with a file-driven architecture that runs without relying on traditional databases. Grav CMS suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplie...
CVE-2025-63593
Grav CMS1.7.49.5 is vulnerable to Cross Site Scripting XSS...
CVE-2025-63593
Grav CMS version 1.7.49.5 is vulnerable to Cross-Site Scripting (XSS) due to a lack of effective filtering and escaping of user-supplied data. An attacker can inject crafted payloads into exposed input parameters to execute arbitrary web scripts or HTML in the context of a user's browser. This co...
CVE-2025-63593
Grav CMS1.7.49.5 is vulnerable to Cross Site Scripting XSS...
CVE-2025-63593
Grav CMS1.7.49.5 is vulnerable to Cross Site Scripting XSS...
CVE-2025-63593: Improper Neutralization of Input During Web Page Generation
Grav CMS1.7.49.5 is vulnerable to Cross Site Scripting XSS...
PT-2025-44792
Name of the Vulnerable Software and Affected Versions Grav CMS version 1.7.49.5 Description Grav CMS version 1.7.49.5 is susceptible to Cross Site Scripting XSS. This allows for the injection of malicious scripts into web pages viewed by other users. Recommendations At the moment, there is no...
EUVD-2021-2321
Malware in sbrugna...