Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
GetgravGrav-plugin-admin*

4 matches found

CVE
CVE•added 2021/04/07 7:15 p.m.•111 views

CVE-2021-21425

Grav Admin Plugin is an HTML user interface that provides a way to configure Grav and create and modify pages. In versions 1.10.7 and earlier, an unauthenticated user can execute some methods of administrator controller without needing any credentials. Particular method execution will result in arb...

9.8CVSS9.4AI score0.89EPSS
CVE
CVE•added 2021/04/13 8:15 p.m.•58 views

CVE-2021-29439

The Grav admin plugin prior to version 1.10.11 does not correctly verify caller's privileges. As a consequence, users with the permission admin.login can install third-party plugins and their dependencies. By installing the right plugin, an attacker can obtain an arbitrary code execution primitive ...

7.2CVSS7.3AI score0.0032EPSS
CVE
CVE•added 2021/11/19 1:15 p.m.•36 views

CVE-2021-3920

grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

5.4CVSS5AI score0.00206EPSS
CVE
CVE•added 2021/09/27 1:15 p.m.•35 views

CVE-2021-3799

grav-plugin-admin is vulnerable to Improper Restriction of Rendered UI Layers or Frames

5.8CVSS5.4AI score0.00161EPSS