Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
getgrav grav vulnerabilities and exploits
(subscribe to this query)
6.1
CVSSv3
CVE-2018-5233
Cross-site scripting (XSS) vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS prior to 1.3.0 allows remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to admin/tools.
Getgrav Grav Cms
6.1
CVSSv3
CVE-2019-16126
Grav up to and including 1.6.15 allows (Stored) Cross-Site Scripting due to JavaScript execution in SVG images.
Getgrav Grav Cms
7.2
CVSSv3
CVE-2021-29439
The Grav admin plugin prior to version 1.10.11 does not correctly verify caller's privileges. As a consequence, users with the permission `admin.login` can install third-party plugins and their dependencies. By installing the right plugin, an attacker can obtain an arbitrary...
Getgrav Grav Admin
5.4
CVSSv3
CVE-2021-3799
grav-plugin-admin is vulnerable to Improper Restriction of Rendered UI Layers or Frames
Getgrav Grav-plugin-admin
9.8
CVSSv3
CVE-2021-21425
Grav Admin Plugin is an HTML user interface that provides a way to configure Grav and create and modify pages. In versions 1.10.7 and previous versions, an unauthenticated user can execute some methods of administrator controller without needing any credentials. Particular method...
Getgrav Grav-plugin-admin
2 Github repositories
5.4
CVSSv3
CVE-2021-3920
grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Getgrav Grav-plugin-admin
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypass
CVE-2024-30051
remote
CVE-2024-27954
CVE-2023-51483
CVE-2023-47782
SSRF
CVE-2024-24715
CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3