1628 matches found
PT-2025-48564
Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Denial of Service DoS vulnerability was identified in the "Languages" submenu of the Grav admin configuration panel /admin/config/system. Specifically, the Supported parameter fails to properly validate user input. If a malformed value ...
PT-2025-48569
Name of the Vulnerable Software and Affected Versions Grav versions prior to 1.11.0-beta.1 Description The Grav admin plugin, an HTML user interface for configuring Grav and managing pages, contains a Stored Cross-Site Scripting XSS issue. An attacker can inject malicious scripts into the...
PT-2025-48566
Name of the Vulnerable Software and Affected Versions Grav versions prior to 1.8.0-beta.27 Grav versions prior to 1.11.0-beta.1 Description The Grav admin plugin, a user interface for configuring Grav, contains a flaw in its "Forgot Password" functionality. Specifically, the functionality at the...
PT-2025-48561
Name of the Vulnerable Software and Affected Versions Grav versions prior to 1.8.0-beta.27 Description Grav CMS contains a path traversal flaw. Authenticated attackers with administrative privileges can read arbitrary files on the server filesystem. This is due to inadequate input sanitization...
PT-2025-48571
Name of the Vulnerable Software and Affected Versions Grav versions prior to 1.11.0-beta.1 Description The Grav admin plugin, an HTML user interface for configuring Grav and managing pages, contains a Stored Cross-Site Scripting XSS issue. The vulnerability exists in the...
Grav 安全漏洞
Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. Grav suffers from a user enumeration and email disclosure vulnerability that can be exploited by attackers to enumerate users and disclose sensitive email...
Grav 安全漏洞
Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. Grav suffers from a denial of service vulnerability that stems from insufficient input validation, which can be exploited by an attacker to cause a denial...
Grav CMS Cross-Site Scripting Vulnerability
Grav CMS is a modern, lightweight content management system CMS with a file-driven architecture that runs without relying on traditional databases. Grav CMS suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplie...
CVE-2025-63593
Grav CMS1.7.49.5 is vulnerable to Cross Site Scripting XSS...
CVE-2025-63593
Grav CMS1.7.49.5 is vulnerable to Cross Site Scripting XSS...
CVE-2025-63593
Grav CMS1.7.49.5 is vulnerable to Cross Site Scripting XSS...
Grav CMS 安全漏洞
Grav CMS is a modern, lightweight content management system CMS with a file-driven architecture that runs without relying on traditional databases. Grav CMS suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplie...
CVE-2025-63593
Grav CMS 1.7.49.5 is reported as vulnerable to Cross-Site Scripting (XSS). The CNVD/Red Hat/NVD entries describe an XSS that arises from insufficient filtering/escaping of user-supplied data, enabling execution of arbitrary scripts in a user’s browser. The XSS affects Grav’s input handling and is...
CVE-2025-63593
Grav CMS1.7.49.5 is vulnerable to Cross Site Scripting XSS...
CVE-2025-63593
Grav CMS1.7.49.5 is vulnerable to Cross Site Scripting XSS...
PT-2025-44792
Name of the Vulnerable Software and Affected Versions Grav CMS version 1.7.49.5 Description Grav CMS version 1.7.49.5 is susceptible to Cross Site Scripting XSS. This allows for the injection of malicious scripts into web pages viewed by other users. Recommendations At the moment, there is no...
EUVD-2021-2321
Malware in sbrugna...
EUVD-2021-2302
Malware in sbrugna...