59506 matches found
MINI-J2RW-MFXQ-W2FM
Bulletin has no description...
MINI-VFP6-WFP9-GFQ8
Bulletin has no description...
MINI-23CF-JF7P-5P36
Bulletin has no description...
MINI-3WM5-3F3R-VJRV
Bulletin has no description...
MINI-XXHH-FCMQ-GR34
Bulletin has no description...
MINI-W2MQ-GWFR-Q6XV
Bulletin has no description...
MINI-6WCG-95J7-M3CJ
Bulletin has no description...
MINI-GP2R-6P52-RFQX
Bulletin has no description...
MINI-RFQJ-VP46-9754
Bulletin has no description...
MINI-9HVR-W2C5-Q5FR
Bulletin has no description...
MINI-9RGR-243J-JC8X
Bulletin has no description...
MINI-QWV7-3FJC-R3R2
Bulletin has no description...
MINI-GHQ7-882J-382P
Bulletin has no description...
MINI-45P4-3MJH-P5QW
Bulletin has no description...
MINI-2WVM-MX9P-Q968
Bulletin has no description...
MINI-3R62-9P97-96R7
Bulletin has no description...
CVE-2026-86197 Grav before 2.0.20 Cross-Site Scripting via Assets Sandbox
Grav before 2.0.20 contains a cross-site scripting vulnerability in the Twig sandbox policy that allowlists addJs and addCss methods on Grav\Common\Assets without proper output escaping. Page editors can inject arbitrary script by registering malicious assets or injecting attributes, which are...
CVE-2026-86197 Grav before 2.0.20 Cross-Site Scripting via Assets Sandbox
Grav before 2.0.20 contains a cross-site scripting vulnerability in the Twig sandbox policy that allowlists addJs and addCss methods on Grav\Common\Assets without proper output escaping. Page editors can inject arbitrary script by registering malicious assets or injecting attributes, which are...
EUVD-2026-71999
Grav before 2.0.20 contains a cross-site scripting vulnerability in the Twig sandbox policy that allowlists addJs and addCss methods on Grav\Common\Assets without proper output escaping. Page editors can inject arbitrary script by registering malicious assets or injecting attributes, which are...