Grav Security Vulnerabilities and Issues — Grav CVE List

Lucene search

GetgravGrav

3 matches found

CVE•added 2025/01/06 7:15 p.m.•44 views

CVE-2024-35498

A cross-site scripting (XSS) vulnerability in Grav v1.7.45 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

6.1CVSS5.8AI score0.00015EPSS

CVE•added 2025/07/25 6:15 p.m.•11 views

CVE-2025-46199

Cross Site Scripting vulnerability in grav v.1.7.48 and before allows an attacker to execute arbitrary code via a crafted script to the form fields

9.8CVSS7.3AI score0.00141EPSS

CVE•added 2025/07/25 8:15 p.m.•9 views

CVE-2025-46198

Cross Site Scripting vulnerability in grav v.1.7.48, v.1.7.47 and v.1.7.46 allows an attacker to execute arbitrary code via the onerror attribute of the img element

8.8CVSS7AI score0.00081EPSS