Getgrav/Grav vulnerabilities

8 vulnerabilities

Known vulnerabilities in Getgrav/Grav, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2021-3924getgravgetgrav/grav+1
EPSS score
4.36%
grav is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')6.3CVE-2021-3904getgravgetgrav/grav+1
EPSS score
0.59%
grav is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6.3CVE-2021-3818getgravgetgrav/grav+1
EPSS score
2.45%
grav is vulnerable to Reliance on Cookies without Validation and Integrity Checking9.1CVE-2022-2073getgravgetgrav/grav+1
EPSS score
10.91%
Code Injection in GitHub repository getgrav/grav prior to 1.7.34.8.2CVE-2022-1173getgravgetgrav/grav+1
EPSS score
1.54%
stored xss in GitHub repository getgrav/grav prior to 1.7.33.4.6CVE-2022-0743getgravgetgrav/grav+1
EPSS score
1.36%
Cross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31.7.1CVE-2022-0970getgravgetgrav/grav+1
EPSS score
1.80%
Cross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31.5.7CVE-2022-0268getgravgetgrav/grav+1
EPSS score
1.42%
Cross-site Scripting (XSS) - Stored in Packagist getgrav/grav prior to 1.7.28.