Lucene search
Veracode Vulnerability DatabaseVERACODE:34470HistoryMar 01, 2022 - 7:33 a.m.
Cross-site Scripting (XSS)
2022-03-0107:33:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18
0.001 Low
EPSS
Percentile
21.6%
getgrav/grav is vulnerable to cross-site scripting (XSS) attacks. The vulnerability exists due to invalid input validation in the detectXss function in the Security.php file which allows remote attackers to inject and execute arbitrary javascript code in the victim’s browser.
| CPE | Name | Operator | Version |
|---|---|---|---|
| getgrav/grav | le | 1.7.30 | |
| getgrav/grav | le | 1.7.30 |
Related
osv
osv
CVE-2022-0743
2022-02-28 23:15:12
Cross site scripting in getgrav/grav
2022-03-02 00:00:22
huntr
huntr
Cross-site Scripting (XSS) - Stored
2022-02-19 13:06:22
cnvd
cnvd
Grav Cross-Site Scripting Vulnerability (CNVD-2022-71110)
2022-03-02 00:00:00
nvd
nvd
CVE-2022-0743
2022-02-28 23:15:12
github
github
Cross site scripting in getgrav/grav
2022-03-02 00:00:22
cve
cve
CVE-2022-0743
2022-02-28 23:15:12
prion
prion
Cross site scripting
2022-02-28 23:15:00
cvelist
cvelist
CVE-2022-0743 Cross-site Scripting (XSS) - Stored in getgrav/grav
2022-02-28 23:00:12