Cross Site Scripting vulnerability in grav v.1.7.48 and before allows an attacker to execute arbitrary code via a crafted script to the form fields
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://rapid-echo-f9c.notion.site/Grav-XSS-25-04-21-1dcaf8998a078001a2eff3dc47974d6d?pvs=4 | Exploit Third Party Advisory |
| https://tyojong.tistory.com/2 | Exploit Third Party Advisory |
Configurations
History
15 Aug 2025, 14:32
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:getgrav:grav:*:*:*:*:*:*:*:* | |
| References | () https://tyojong.tistory.com/2 - Exploit, Third Party Advisory | |
| References | () https://rapid-echo-f9c.notion.site/Grav-XSS-25-04-21-1dcaf8998a078001a2eff3dc47974d6d?pvs=4 - Exploit, Third Party Advisory | |
| First Time |
Getgrav
Getgrav grav |
25 Jul 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-25 18:15
Updated : 2025-08-15 14:32
NVD link : CVE-2025-46199
Mitre link : CVE-2025-46199
JSON object : View
Products Affected
getgrav
- grav
CWE
No CWE.