Getgrav Grav CMS Admin Plugin vulnerabilities

1 vulnerability

Known vulnerabilities in Getgrav Grav CMS Admin Plugin, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.4CVE-2020-36955getgravgrav cms admin plugin
EPSS score
0.64%
Grav CMS 1.6.30 with Admin Plugin 1.9.18 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the page title field. Attackers can create a new page with a malicious script in the title, which will be executed when the page is viewed in the admin panel or on the site.