~ / search / GHSA-2p89-ppc2-mrq4

GHSA-2p89-ppc2-mrq4

Cross site scripting in getgrav/grav

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-0743

Packages

EcosystemPackageAffectedFixed in
Packagist getgrav/grav < 1.7.31 1.7.31

Details

As written in the advisory (Markdown source, shown as plain text).

User input is not properly sanitized leading to cross site scrpting (xss) in grav.

References

External links from the advisory. They lead to third-party sites.