CVE-2025-46199

Cross Site Scripting vulnerability in grav v.1.7.48 and before allows an attacker to execute arbitrary code via a crafted script to the form fields...

CVE-2025-46199

The CVE-2025-46199 entry concerns Grav CMS. Affected software: Grav prior to version 1.7.49. Issue: Cross-Site Scripting via crafted scripts in form fields due to insufficient input validation. Impact described as arbitrary code execution with high severity (per the initial data: CVSS 3.1 vector ...

CVE-2025-46199

Cross Site Scripting vulnerability in grav v.1.7.48 and before allows an attacker to execute arbitrary code via a crafted script to the form fields...