CVE-2025-46199

Critical CVSS: 9.8

Cross Site Scripting vulnerability in grav v.1.7.48 and before allows an attacker to execute arbitrary code via a crafted script to the form fields

Vendor

Product

CWE

Yayın Tarihi

2025-07-25 18:15:26

Güncelleme

2025-08-15 14:32:27

Source Identifier

cve@mitre.org

KEV Date Added

CWE-79 Grav CRITICAL Getgrav 2025

https://rapid-echo-f9c.notion.site/Grav-XSS-25-04-21-1dcaf8998a078001a2eff3dc47974d6d?pvs=4 https://tyojong.tistory.com/2

High

CVE-2026-29924

Grav CMS v1.7.x and before is vulnerable to XML External Entity (XXE) through the SVG file upload functionality in the a…

Critical

CVE-2021-47812

GravCMS 1.10.7 contains an unauthenticated vulnerability that allows remote attackers to write arbitrary YAML configurat…

Medium

CVE-2025-66843

grav before v1.7.49.5 has a Stored Cross-Site Scripting (Stored XSS) vulnerability in the page editing functionality. An…

Critical

CVE-2025-66844

In grav

Medium

CVE-2025-65186

Grav CMS 1.7.49 is vulnerable to Cross Site Scripting (XSS). The page editor allows authenticated users to edit page con…

Medium

CVE-2025-66312

This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create…