GHSA-6268-v434-45m5

ghsaUSosv

Cross-site Scripting in Grav

view advisory published 2019-11-08Licence: CC-BY-4.0

Grav through 1.6.15 allows (Stored) Cross-Site Scripting due to JavaScript execution in SVG images.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-16126US	medium6.1	1.54% (75th)	—	2019-09-09
Grav through 1.6.15 allows (Stored) Cross-Site Scripting due to JavaScript execution in SVG images.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.