Recent CVEs
CVE-2022-2073
Code Injection in GitHub repository getgrav/grav prior to 1.7.34.
CRITICAL
Jun 29, 2022
CVE-2022-1173
stored xss in GitHub repository getgrav/grav prior to 1.7.33.
HIGH
Apr 26, 2022
CVE-2022-0970
Cross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31.
HIGH
Mar 15, 2022
CVE-2022-0743
Cross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31.
MEDIUM
Feb 28, 2022
CVE-2022-0268
Cross-site Scripting (XSS) - Stored in Packagist getgrav/grav prior to 1.7.28.
MEDIUM
Jan 25, 2022
CVE-2021-3924
grav is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
HIGH
Nov 05, 2021
CVE-2021-3904
grav is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
MEDIUM
Oct 27, 2021
CVE-2021-3818
grav is vulnerable to Reliance on Cookies without Validation and Integrity Checking
MEDIUM
Sep 27, 2021