69 matches found
Cross-Site Scripting (XSS)
getgrav/grav is vulnerable to stored cross-site scripting. The vulnerability exists due to lack of xss validations for uploaded SVG files before they get stored which allows an attacker to inject and execute arbitrary javascript...
CVE-2022-0970
Cross-site Scripting XSS - Stored in GitHub repository getgrav/grav prior to 1.7.31...
CVE-2022-0970
Cross-site Scripting XSS - Stored in GitHub repository getgrav/grav prior to 1.7.31...
CVE-2022-0970
CVE-2022-0970 concerns Grav CMS (getgrav/grav). The vulnerability is a stored cross-site scripting issue in Grav prior to 1.7.31 caused by lack of proper data validation/filtering of user-supplied data and output, enabling JavaScript execution on the client side. The available connected documenta...
CVE-2022-0970 Cross-site Scripting (XSS) - Stored in getgrav/grav
Cross-site Scripting XSS - Stored in GitHub repository getgrav/grav prior to 1.7.31...
GHSA-2P89-PPC2-MRQ4 Cross site scripting in getgrav/grav
User input is not properly sanitized leading to cross site scrpting xss in grav...
Cross site scripting in getgrav/grav
User input is not properly sanitized leading to cross site scrpting xss in grav...
CVE-2022-0743
Cross-site Scripting XSS - Stored in GitHub repository getgrav/grav prior to 1.7.31...
CVE-2022-0743 Cross-site Scripting (XSS) - Stored in getgrav/grav
Cross-site Scripting XSS - Stored in GitHub repository getgrav/grav prior to 1.7.31...
CVE-2022-0743 Cross-site Scripting (XSS) - Stored in getgrav/grav
Cross-site Scripting XSS - Stored in GitHub repository getgrav/grav prior to 1.7.31...
CVE-2022-0743
Summary: CVE-2022-0743 is a stored XSS vulnerability in the Grav CMS (GitHub repo getgrav/grav) affecting versions prior to 1.7.31. The issue arises from insufficient input validation/output handling that allows injected scripts to be stored and later executed by users. Public references (NVD, Re...
Cross-site Scripting (XSS)
getgrav/grav is vulnerable to cross-site scripting XSS attacks. Insufficient checks in detectXss allow remote attackers to inject and execute arbitrary javascript code in the victim's browser...
CVE-2022-0268
Cross-site Scripting XSS - Stored in Packagist getgrav/grav prior to 1.7.28...
CVE-2022-0268
Cross-site Scripting XSS - Stored in Packagist getgrav/grav prior to 1.7.28...
Cross site scripting
Cross-site Scripting XSS - Stored in Packagist getgrav/grav prior to 1.7.28...
CVE-2022-0268
CVE-2022-0268 is an XSS vulnerability in Grav prior to 1.7.28, stored in Packagist getgrav/grav. Root cause: insufficient input validation/escaping allows a low-privilege user to inject arbitrary JavaScript when creating a page. Affects Grav versions
CVE-2022-0268 Cross-site Scripting (XSS) - Stored in getgrav/grav
Cross-site Scripting XSS - Stored in Packagist getgrav/grav prior to 1.7.28...
CVE-2022-0268 Cross-site Scripting (XSS) - Stored in getgrav/grav
Cross-site Scripting XSS - Stored in Packagist getgrav/grav prior to 1.7.28...
Cross-site Scripting (XSS) - Stored in getgrav/grav
Description Stored XSS is a vulnerability in which the attacker can execute arbitrary javascript code in the victim's browser. The XSS payload is stored in a webpage and it gets executed whenever someone visits that webpage. I used &58 instead of : in the href attribute of tag to bypass the xss...