Lucene search
+L

1 matches found

osv_ghsa
osv_ghsa
•added 2025/12/02 12:37 a.m.•20 views

GHSA-RMW5-F87R-W988 Grav Admin Plugin is vulnerable to Cross-Site Scripting (XSS) Stored endpoint `/admin/accounts/groups/[group]` parameter `data[readableName]`

Summary A Stored Cross-Site Scripting XSS vulnerability was identified in the /admin/accounts/groups/Grupo endpoint of the Grav application. This vulnerability allows attackers to inject malicious scripts into the datareadableName parameter. The injected scripts are stored on the server and...

6.2CVSS6AI score0.00214EPSS
SaveExploits1References4
Rows per page
Query Builder