Lucene search
Veracode Vulnerability DatabaseVERACODE:21461HistorySep 10, 2019 - 1:37 a.m.
Cross-Site Scripting (XSS)
2019-09-1001:37:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.001 Low
EPSS
Percentile
44.9%
getgrav/grav is vulnerable to cross-site scripting (XSS) attacks. During uploading of a new avatar, parameters sent via SVG files are not sanitized, allowing an attacker to inject arbitrary Javascript into a victim’s browser.
| CPE | Name | Operator | Version |
|---|---|---|---|
| getgrav/grav | le | 1.7.0-beta.7 |
Related
osv
osv
Cross-site Scripting in Grav
2019-11-08 20:06:08
CVE-2019-16126
2019-09-09 02:15:10
github
github
Cross-site Scripting in Grav
2019-11-08 20:06:08
cve
cve
CVE-2019-16126
2019-09-09 02:15:10
cvelist
cvelist
CVE-2019-16126
2019-09-09 01:01:23
nvd
nvd
CVE-2019-16126
2019-09-09 02:15:10
prion
prion
Cross site scripting
2019-09-09 02:15:00