Lucene search
+L

1 matches found

OSV
OSV
added 2025/12/02 12:37 a.m.9 views

GHSA-RMW5-F87R-W988 Grav Admin Plugin is vulnerable to Cross-Site Scripting (XSS) Stored endpoint `/admin/accounts/groups/[group]` parameter `data[readableName]`

Summary A Stored Cross-Site Scripting XSS vulnerability was identified in the /admin/accounts/groups/Grupo endpoint of the Grav application. This vulnerability allows attackers to inject malicious scripts into the datareadableName parameter. The injected scripts are stored on the server and...

6.2CVSS5.4AI score0.00209EPSS
SaveExploits1References4
Rows per page
Query Builder