Lucene search
+L

2375 matches found

Github Security Blog
Github Security Blog
•added 2022/03/02 12:00 a.m.•37 views

Cross site scripting in getgrav/grav

User input is not properly sanitized leading to cross site scrpting xss in grav...

4.6CVSS1.3AI score0.01364EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2022/03/02 12:00 a.m.•29 views

GHSA-2P89-PPC2-MRQ4 Cross site scripting in getgrav/grav

User input is not properly sanitized leading to cross site scrpting xss in grav...

4.6CVSS4.5AI score0.01364EPSS
SaveExploits1References4
CNVD
CNVD
•added 2022/03/02 12:00 a.m.•71 views

Grav Cross-Site Scripting Vulnerability (CNVD-2022-71110)

Grav is a scalable CMS content management system for personal blogs, small content publishing platforms, and single-page product displays. cross-site scripting vulnerabilities exist in versions prior to Grav 1.7.31, which stem from the application's lack of data validation filtering of...

4.6CVSS2.8AI score0.01364EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/02/28 11:15 p.m.•16 views

CVE-2022-0743

Cross-site Scripting XSS - Stored in GitHub repository getgrav/grav prior to 1.7.31...

4.6CVSS5.4AI score0.01364EPSS
SaveExploits1References3
NVD
NVD
•added 2022/02/28 11:15 p.m.•35 views

CVE-2022-0743

Cross-site Scripting XSS - Stored in GitHub repository getgrav/grav prior to 1.7.31...

4.6CVSS0.01364EPSS
SaveExploits1References2
Prion
Prion
•added 2022/02/28 11:15 p.m.•13 views

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository getgrav/grav prior to 1.7.31...

3.5CVSS4.5AI score0.01364EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/02/28 11:00 p.m.•38 views

CVE-2022-0743 Cross-site Scripting (XSS) - Stored in getgrav/grav

Cross-site Scripting XSS - Stored in GitHub repository getgrav/grav prior to 1.7.31...

4.6CVSS4.8AI score0.01364EPSS
SaveExploits1References2
OSV
OSV
•added 2022/02/28 11:00 p.m.•32 views

CVE-2022-0743 Cross-site Scripting (XSS) - Stored in getgrav/grav

Cross-site Scripting XSS - Stored in GitHub repository getgrav/grav prior to 1.7.31...

4.6CVSS4.7AI score
SaveExploits0References4
Mend
Mend
•added 2022/02/28 11:00 p.m.•3 views

CVE-2022-0743

Cross-site Scripting XSS - Stored in GitHub repository getgrav/grav prior to 1.7.31...

5.1CVSS0.01364EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2022/02/28 12:00 a.m.•20 views

Grav 跨站脚本漏洞

Grav is a scalable CMS content management system for personal blogs, small content publishing platforms, and single-page product displays. cross-site scripting vulnerabilities exist in versions prior to Grav 1.7.31, which stem from the application's lack of data validation filtering of...

4.6CVSS5.6AI score0.01364EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/28 12:00 a.m.•3 views

CVE-2022-0743: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository getgrav/grav prior to 1.7.31...

4.6CVSS5.5AI score0.01364EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2022/01/27 6:27 p.m.•53 views

Cross-site Scripting in grav

In grav prior to version 1.7.28, a low privilege user can create a page with arbitrary javascript by bypassing insufficent XSS filtering...

5.7CVSS4.1AI score0.01416EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2022/01/27 6:27 p.m.•27 views

GHSA-735V-WX75-XMMM Cross-site Scripting in grav

In grav prior to version 1.7.28, a low privilege user can create a page with arbitrary javascript by bypassing insufficent XSS filtering...

5.7CVSS5.2AI score0.01416EPSS
SaveExploits1References4
CNVD
CNVD
•added 2022/01/27 12:00 a.m.•56 views

Grav Cross-Site Scripting Vulnerability (CNVD-2022-07637)

A cross-site scripting vulnerability exists in versions of Grav prior to 1.7.28, which stems from a lack of data validation filtering of user-supplied data and output. An attacker could exploit the vulnerability to execute JavaScript code on the client side...

5.7CVSS3.5AI score0.01416EPSS
SaveExploits1References1
Veracode
Veracode
•added 2022/01/26 3:05 a.m.•23 views

Cross-site Scripting (XSS)

getgrav/grav is vulnerable to cross-site scripting XSS attacks. Insufficient checks in detectXss allow remote attackers to inject and execute arbitrary javascript code in the victim's browser...

5.4CVSS5.9AI score0.01416EPSS
SaveExploits1References4Affected Software1
attackerkb
attackerkb
•added 2022/01/25 11:15 a.m.•15 views

CVE-2022-0268

Cross-site Scripting XSS - Stored in Packagist getgrav/grav prior to 1.7.28...

5.7CVSS5.9AI score0.01416EPSS
SaveExploits1References3
NVD
NVD
•added 2022/01/25 11:15 a.m.•31 views

CVE-2022-0268

Cross-site Scripting XSS - Stored in Packagist getgrav/grav prior to 1.7.28...

5.7CVSS0.01416EPSS
SaveExploits1References2
Prion
Prion
•added 2022/01/25 11:15 a.m.•17 views

Cross site scripting

Cross-site Scripting XSS - Stored in Packagist getgrav/grav prior to 1.7.28...

3.5CVSS5.2AI score0.01416EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2022/01/25 10:40 a.m.•30 views

CVE-2022-0268 Cross-site Scripting (XSS) - Stored in getgrav/grav

Cross-site Scripting XSS - Stored in Packagist getgrav/grav prior to 1.7.28...

5.7CVSS5.7AI score
SaveExploits0References4
Mend
Mend
•added 2022/01/25 10:40 a.m.•2 views

CVE-2022-0268

Cross-site Scripting XSS - Stored in Packagist getgrav/grav prior to 1.7.28...

6.9CVSS0.01416EPSS
SaveExploits1References5
Rows per page
Query Builder