Lucene search
Veracode Vulnerability DatabaseVERACODE:35264HistoryApr 27, 2022 - 4:05 a.m.
Cross-site Scripting (XSS)
2022-04-2704:05:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
21.6%
getgrav/grav is vulnerable to cross site scripting. The vulnerability exists due to lack of sanitization of regular expression in the detectXss function allowing an attacker to inject maliciously crafted script via the browser in onX events.
| CPE | Name | Operator | Version |
|---|---|---|---|
| getgrav/grav | le | 1.7.32 | |
| getgrav/grav | le | 1.7.32 |
Related
cnvd
cnvd
Grav Cross-Site Scripting Vulnerability
2022-04-28 00:00:00
cvelist
cvelist
CVE-2022-1173 stored xss in getgrav/grav
2022-04-26 16:06:42
cve
cve
CVE-2022-1173
2022-04-26 16:15:47
nvd
nvd
CVE-2022-1173
2022-04-26 16:15:47
github
github
Stored cross site scripting in getgrav/grav
2022-04-27 00:00:20
huntr
huntr
stored xss
2022-03-26 07:46:07
prion
prion
Cross site scripting
2022-04-26 16:15:00
osv
osv
Stored cross site scripting in getgrav/grav
2022-04-27 00:00:20
CVE-2022-1173
2022-04-26 16:15:47