CVE-2025-46199

Cross Site Scripting vulnerability in grav v.1.7.48 and before allows an attacker to execute arbitrary code via a crafted script to the form fields...

CVE-2025-46199

Cross Site Scripting vulnerability in grav v.1.7.48 and before allows an attacker to execute arbitrary code via a crafted script to the form fields...

CVE-2025-46199

The Grav content management system (CMS) is vulnerable to a Cross-Site Scripting (XSS) vulnerability in versions prior to 1.7.49 (including v.1.7.48 and before). The root cause is insufficient input validation of form fields, which allows an attacker to inject and execute a crafted script . This ...