CVE-2022-0970: Stored Cross-site Scripting in grav
Cross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31.
Other sources
Grav prior to 1.7.31 is vulnerable to stored cross-site scripting.
— GitHub
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/getgrav/gravto a version that resolves this vulnerability.Fixed in 1.7.31
Event History
Frequently Asked Questions
What is CVE-2022-0970?
CVE-2022-0970 is a Cross-site Scripting (XSS) vulnerability that was found in the GitHub repository getgrav/grav prior to version 1.7.31.
How does CVE-2022-0970 impact my system?
CVE-2022-0970 could allow an attacker to inject malicious scripts into the web application, potentially compromising user data and performing unauthorized actions.
What software versions are affected by CVE-2022-0970?
Versions of Getgrav Grav prior to 1.7.31 are affected by CVE-2022-0970.
How severe is CVE-2022-0970?
CVE-2022-0970 is classified as a high-severity vulnerability with a CVSS score of 5.4.
How can I fix CVE-2022-0970?
To fix CVE-2022-0970, update your Getgrav Grav installation to version 1.7.31 or later.