Lucene search
Veracode Vulnerability DatabaseVERACODE:32747HistoryOct 28, 2021 - 3:41 a.m.
Cross-Site Scripting (XSS)
2021-10-2803:41:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
21.6%
getgrav/grav is vulnerable to cross-site scripting. This is due to improper encoding of the `` tags, which allows an attacker to insert and execute malicious javascript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| getgrav/grav | le | 1.7.23 | |
| getgrav/grav | le | 1.7.23 |
Related
cve
cve
CVE-2021-3904
2021-10-27 22:15:07
osv
osv
Cross-Site Scripting in grav
2021-11-01 19:17:31
CVE-2021-3904
2021-10-27 22:15:07
prion
prion
Cross site scripting
2021-10-27 22:15:00
nvd
nvd
CVE-2021-3904
2021-10-27 22:15:07
huntr
huntr
Cross-site Scripting (XSS) - Stored in getgrav/grav
2021-10-20 14:02:21
cvelist
cvelist
CVE-2021-3904 Cross-site Scripting (XSS) - Stored in getgrav/grav
2021-10-27 21:10:15
github
github
Cross-Site Scripting in grav
2021-11-01 19:17:31