2 matches found
GHSA-993V-76JG-67XR Duplicate Advisory: Grav: Single invalid UTF-8 byte disables every rule in Security::detectXss(), bypassing the page-content XSS safety gate
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-q2j8-x8hf-63ch. This link is maintained to preserve external references. Original Description Grav before 2.0.14 contains a stored cross-site scripting vulnerability in the Security::detectXss function...
5.4CVSS5.6AI score
SaveExploits0References3
20