Lucene search
+L

1628 matches found

CNVD
CNVD
added 2018/03/20 12:00 a.m.13 views

Grav CMS system/src/Grav/Common/Twig/Twig.php file cross-site scripting vulnerability

Grav CMS is a scalable CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. A cross-site scripting vulnerability exists in the system/src/Grav/Common/Twig/Twig.php file in Grav CMS version 1.3.0. A remote attacker can inject...

6.1CVSS6AI score0.03286EPSS
SaveExploits3References1
NVD
NVD
added 2018/03/19 9:29 p.m.37 views

CVE-2018-5233

Cross-site scripting XSS vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin/tools...

6.1CVSS6AI score0.03286EPSS
SaveExploits3References2
Prion
Prion
added 2018/03/19 9:29 p.m.23 views

Cross site scripting

Cross-site scripting XSS vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin/tools...

4.3CVSS6AI score0.03286EPSS
SaveExploits3References2Affected Software1
OSV
OSV
added 2018/03/19 9:29 p.m.24 views

CVE-2018-5233

Cross-site scripting XSS vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin/tools...

6.1CVSS6AI score
SaveExploits0References2
CVE
CVE
added 2018/03/19 9:00 p.m.86 views

CVE-2018-5233

Grav CMS

6.1CVSS5.9AI score0.03286EPSS
SaveExploits3References2Affected Software1
Cvelist
Cvelist
added 2018/03/19 9:00 p.m.38 views

CVE-2018-5233

Cross-site scripting XSS vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin/tools...

6AI score0.03286EPSS
SaveExploits3References2
Packet Storm
Packet Storm
added 2018/03/16 12:00 a.m.71 views

Grav CMS 1.2.4 Cross Site Scripting

CVE-2018-5233 Grav CMS admin plugin Reflected Cross Site Scripting XSS vulnerability Description Grav CMS is a flat-file CMS using Markdown files for content management Official Website. It has been elected "Best Open Source CMS of 2016" by CMS critic. The application does not always filter user...

6.5AI score0.03286EPSS
SaveExploits3
exploitpack
exploitpack
added 2017/06/07 12:00 a.m.35 views

Grav CMS 1.4.2 Admin Plugin - Cross-Site Scripting

Grav CMS 1.4.2 Admin Plugin - Cross-Site Scripting Exploit Title: GravCMS Core Admin Plugin v1.4.2 - Persistent Cross-Site Scripting Date: 2017-06-07 Exploit Author: Ahsan Tahir Vendor Homepage: https://getgrav.org/ Software Link: https://getgrav.org/download/core/grav-admin/1.2.4 Version: 1.4.2...

6.7AI score
SaveExploits0
Rows per page
Query Builder