Vulnerabilidades do Getgrav Grav CMS Admin Plugin
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Getgrav Grav CMS Admin Plugin: 1 registro(s), com versões afetadas e correções.
CVE-2020-36955
Média · 6.4
CWE-79 26/01/2026
Grav CMS 1.6.30 Admin Plugin 1.9.18 - 'Page Title' Persistent Cross-Site Scripting
Grav CMS 1.6.30 with Admin Plugin 1.9.18 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the page title field. Attackers can create a new page with a malicious script in the title, which will be executed when the page is viewed in the admin panel or on the site.