Lucene search
K

4 matches found

Github Security Blog
Github Security Blog
added 2022/05/14 3:31 a.m.12 views

Grav CMS Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin/tools...

6.1CVSS5.8AI score0.18828EPSS
Exploits3References4Affected Software1
OSV
OSV
added 2022/05/14 3:31 a.m.11 views

GHSA-977G-93F5-RQJX Grav CMS Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin/tools...

6.1CVSS6AI score0.18828EPSS
Exploits3References4
CNVD
CNVD
added 2018/03/20 12:0 a.m.2 views

Grav CMS system/src/Grav/Common/Twig/Twig.php file cross-site scripting vulnerability

Grav CMS is a scalable CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. A cross-site scripting vulnerability exists in the system/src/Grav/Common/Twig/Twig.php file in Grav CMS version 1.3.0. A remote attacker can inject...

6.1CVSS6AI score0.18828EPSS
Exploits3References1
Cvelist
Cvelist
added 2018/03/19 9:0 p.m.11 views

CVE-2018-5233

Cross-site scripting XSS vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin/tools...

6AI score0.18828EPSS
Exploits3References2
Rows per page
Query Builder