Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
getgrav grav vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv2
CVE-2021-29439
The Grav admin plugin prior to version 1.10.11 does not correctly verify caller's privileges. As a consequence, users with the permission `admin.login` can install third-party plugins and their dependencies. By installing the right plugin, an attacker can obtain an arbitrary...
Getgrav Grav Admin
4.3
CVSSv2
CVE-2018-5233
Cross-site scripting (XSS) vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS prior to 1.3.0 allows remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to admin/tools.
Getgrav Grav Cms
4.3
CVSSv2
CVE-2019-16126
Grav up to and including 1.6.15 allows (Stored) Cross-Site Scripting due to JavaScript execution in SVG images.
Getgrav Grav Cms
3.5
CVSSv2
CVE-2021-3920
grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Getgrav Grav-plugin-admin
5.8
CVSSv2
CVE-2021-3799
grav-plugin-admin is vulnerable to Improper Restriction of Rendered UI Layers or Frames
Getgrav Grav-plugin-admin
7.5
CVSSv2
CVE-2021-21425
Grav Admin Plugin is an HTML user interface that provides a way to configure Grav and create and modify pages. In versions 1.10.7 and previous versions, an unauthenticated user can execute some methods of administrator controller without needing any credentials. Particular method...
Getgrav Grav-plugin-admin
2 Github repositories
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-40673
CVE-2024-36674
CVE-2024-27348
unspecified
CVE-2024-24919
CVE-2024-4870
malicious code
CVE-2024-2019
hard-coded
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3