p PatchFirst

PatchFirst · Latest vulnerabilities

getgrav/grav 2.0.25: known vulnerabilities

Known vulnerability affecting getgrav/grav 2.0.25: 1. Compare the fixes below with your installed release.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2023-31506

    Medium · CVSS 5.4EPSS 1%No fix published

    CVE-2023-31506

    A cross-site scripting (XSS) vulnerability in Grav versions 1.7.44 and before, allows remote authenticated attackers to execute arbitrary web scripts or HTML via the onmouseover attribute of an ISINDEX element.

    getgrav/gravPHP
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →