Lucene search
+L

1 matches found

OSV
OSV
added 2025/12/01 10:0 p.m.11 views

CVE-2025-66308 Grav Admin Plugin vulnerable to Cross-Site Scripting (XSS) Stored endpoint `/admin/config/site` parameter `data[taxonomies]`

This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a Stored Cross-Site Scripting XSS vulnerability was identified in the /admin/config/site endpoint of the Grav application. This...

6.8CVSS5AI score
SaveExploits0References4
Rows per page
Query Builder