GHSA-m78c-qx99-mvw9Low

Grav Cross-site Scripting vulnerability

Published
January 6, 2025
Last Modified
January 7, 2025

🔗 CVE IDs covered (1)

CVE-2024-35498 →

📋 Description

A cross-site scripting (XSS) vulnerability in Grav v1.7.45 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

🎯 Affected products1

  • composer/getgrav/grav:<= 1.7.45

🔗 References (4)