Vulnerabilidades en getgrav
211 resultadosCVE-2026-75834MEDIUMGrav before 2.0.14 Stored XSS via Invalid UTF-8 ByteEPSS 0.3%CVE-2026-74908MEDIUMGrav plugin-api before 1.0.15 Script Injection via SVGEPSS 0.3%CVE-2025-66309MEDIUMGrav vulnerable to Cross-Site Scripting (XSS) Reflected endpoint /admin/pages/[page], parameter data[header][content][items], located in the "Blog Config" tabEPSS 0.2%CVE-2026-109320MEDIUMGrav API Plugin before 1.0.36 Disabled Account Session Access BypassEPSS 0.2%CVE-2026-61452MEDIUMGrav before 2.0.4 Improper Session Invalidation JWT Access TokensEPSS 0.2%CVE-2026-80204CRITICALGrav before 1.0.18 Authentication Bypass via Scoped API KeyEPSS 0.2%CVE-2026-66400MEDIUMGrav Login Plugin before 3.8.13 Insufficient Session ExpirationEPSS 0.2%CVE-2026-42612HIGHGrav: Publisher-Level Stored XSS via Unquoted Event AttributesEPSS 0.2%CVE-2026-72821MEDIUMGrav Form Plugin before 9.1.15 Stored XSS via Radio ToggleEPSS 0.2%CVE-2026-75107MEDIUMGrav Form Plugin before 9.1.19 Stored XSS via Field PropertiesEPSS 0.2%CVE-2026-85600MEDIUMGrav Admin before 2.0.21 Stored XSS via usernameEPSS 0.2%CVE-2025-66308MEDIUMGrav Admin Plugin vulnerable to Cross-Site Scripting (XSS) Stored endpoint `/admin/config/site` parameter `data[taxonomies]`EPSS 0.2%CVE-2025-66310MEDIUMGrav vulnerable to Cross-Site Scripting (XSS) Stored endpoint `/admin/pages/[page]` parameter `data[header][template]` in Advanced TabEPSS 0.2%CVE-2025-66312MEDIUMGrav Admin Plugin vulnerable to Cross-Site Scripting (XSS) Stored endpoint `/admin/accounts/groups/[group]` parameter `data[readableName]`EPSS 0.2%CVE-2025-66311MEDIUMGrav vulnerable to Cross-Site Scripting (XSS) Stored endpoint `/admin/pages/[page]` in Multiples parametersEPSS 0.2%CVE-2026-75833HIGHGrav API Plugin Open Redirect via Backslash BypassEPSS 0.2%CVE-2026-114657MEDIUMGrav 2.0.0 before 2.2.5 HTTP Basic Credential Disclosure via Twig UriEPSS 0.2%CVE-2026-72701MEDIUMGrav CMS before 2.0.16 Timing Attack via verifyNonceEPSS 0.2%CVE-2026-55885MEDIUMGrav: Admin Backup Zip File Exposes Account Credentials and Configuration SecretsEPSS 0.2%CVE-2026-114660HIGHGrav 2.0.0 before 2.2.5 Unauthorized Page Deletion via Flex Form DirectivesEPSS 0.2%