Loading HuntDB...

GHSA-2p89-ppc2-mrq4

GitHub Security Advisory

Cross site scripting in getgrav/grav

✓ GitHub Reviewed MODERATE Has CVE

Advisory Details

User input is not properly sanitized leading to cross site scrpting (xss) in grav.

Affected Packages

Packagist getgrav/grav
Affected versions: 0 (fixed in 1.7.31)

Related CVEs

Key Information

GHSA ID
GHSA-2p89-ppc2-mrq4
Published
March 2, 2022 12:00 AM
Last Modified
March 18, 2022 8:45 PM
CVSS Score
5.0 /10
Primary Ecosystem
Packagist
Primary Package
getgrav/grav
GitHub Reviewed
✓ Yes

Dataset

Last updated: September 15, 2025 6:32 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.