CVE-2025-66309 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1…
Medium CVSS: 6.2

CVE-2025-66309

This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a Reflected Cross-Site Scripting (XSS) vulnerability was identified in the /admin/pages/[page] endpoint of the Grav application. This vulnerability allows attackers to inject malicious scripts into the data[header][content][items] parameter. This vulnerability is fixed in 1.11.0-beta.1.
Vendor
Getgrav
Product
Grav-plugin-admin
CWE
CWE-79
Yayın Tarihi
2025-12-01 22:15:50
Güncelleme
2025-12-03 21:56:35
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-79 Grav-plugin-admin MEDIUM Getgrav 2025

Referanslar

https://github.com/getgrav/grav-plugin-admin/commit/99f653296504f1d6408510dd2f6f20a45a26f9b0 https://github.com/getgrav/grav/security/advisories/GHSA-65mj-f7p4-wggq https://github.com/getgrav/grav/security/advisories/GHSA-65mj-f7p4-wggq