GHSA-2p89-ppc2-mrq4

ghsaUSosv

Cross site scripting in getgrav/grav

view advisory published 2022-03-02Licence: CC-BY-4.0

User input is not properly sanitized leading to cross site scrpting (xss) in grav.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2022-0743USmedium4.6—
Cross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan