Latest vulnerabilities for vendor "getgrav"

5.4

First published (updated )

CVE-2023-31506

Getgrav Dom-sanitizerXSS

6.1

First published (updated )

CVE-2023-49146

Getgrav GravServer-side Template Injection (SSTI) in grav

8.8

First published (updated )

CVE-2023-37897

Getgrav GravCode Injection, Input Validation

8.8

First published (updated )

CVE-2023-34448

Getgrav GravCode Injection

8.8

First published (updated )

CVE-2023-34253

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Getgrav GravXSS

6.1

First published (updated )

CVE-2023-34452

Getgrav GravCode Injection

critical

9.9

First published (updated )

CVE-2023-34251

Getgrav GravCode Injection

8.8

First published (updated )

CVE-2023-34252

Getgrav GravCode Injection in getgrav/grav

critical

9.1

First published (updated )

CVE-2022-2073

Getgrav Gravstored xss in getgrav/grav

8.2

First published (updated )

CVE-2022-1173

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Getgrav GravCross-site Scripting (XSS) - Stored in getgrav/grav

7.1

First published (updated )

CVE-2022-0970

Getgrav GravCross-site Scripting (XSS) - Stored in getgrav/grav

4.6

First published (updated )

CVE-2022-0743

Getgrav GravCross-site Scripting (XSS) - Stored in getgrav/grav

5.7

First published (updated )

CVE-2022-0268

Getgrav Grav-plugin-adminCross-site Scripting (XSS) - Stored in getgrav/grav-plugin-admin

5.4

First published (updated )

CVE-2021-3920

Getgrav GravPath Traversal in getgrav/grav

8.8

First published (updated )

CVE-2021-3924

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Getgrav GravCross-site Scripting (XSS) - Stored in getgrav/grav

6.3

First published (updated )

CVE-2021-3904

Getgrav GravReliance on Cookies without Validation and Integrity Checking in getgrav/grav

6.3

First published (updated )

CVE-2021-3818

Getgrav Grav-plugin-adminImproper Restriction of Rendered UI Layers or Frames in getgrav/grav-plugin-admin

5.8

First published (updated )

CVE-2021-3799

Getgrav GravTwig allowing dangerous PHP functions by default

8.4

First published (updated )

CVE-2021-29440

Getgrav Grav AdminPlugins can be installed with minimal admin privileges

7.2

First published (updated )

CVE-2021-29439

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Getgrav Grav-plugin-adminUnauthenticated Arbitrary YAML Write/Update leads to Code Execution

critical

9.8

First published (updated )

CVE-2021-21425

Getgrav Grav CmsCSRF

8.8

First published (updated )

CVE-2020-29553

Getgrav Grav CmsPath Traversal, CSRF

8.1

First published (updated )

CVE-2020-29555

Getgrav Grav CmsPath Traversal, CSRF

5.5

First published (updated )

CVE-2020-29556

Getgrav GravCommon/Grav.php in Grav before 1.7 has an Open Redirect. This is partially fixed in 1.6.23 and still…

6.1

First published (updated )

CVE-2020-11529

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Getgrav Grav CmsXSS

6.1

First published (updated )

CVE-2019-16126

Getgrav Grav CmsXSS