GHSA-xrf8-cmrg-7436

ghsaUSosv

Cross-site scripting (XSS) vulnerability in Grav

view advisory published 2024-02-09Licence: CC-BY-4.0

A cross-site scripting (XSS) vulnerability in Grav versions 1.7.44 and before, allows remote authenticated attackers to execute arbitrary web scripts or HTML via the onmouseover attribute of an ISINDEX element.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-31506US	medium5.4	1.00% (63rd)	—	2024-02-09
A cross-site scripting (XSS) vulnerability in Grav versions 1.7.44 and before, allows remote authenticated attackers to execute arbitrary web scripts or HTML via the onmouseover at…

references

External citations — patches, advisories, analysis.

https://github.com/getgrav/gravPACKAGE
https://m3n0sd0n4ld.github.io/patoHackventuras/cve-2023-31506WEB
https://nvd.nist.gov/vuln/detail/CVE-2023-31506ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan