~ / search / GHSA-r6hh-5g3q-wwgc

GHSA-r6hh-5g3q-wwgc

Stored Cross-site Scripting in grav

Source: GitHub Advisory Database (reviewed) High CVE-2022-0970

Packages

EcosystemPackageAffectedFixed in
Packagist getgrav/grav < 1.7.31 1.7.31

Details

As written in the advisory (Markdown source, shown as plain text).

Grav prior to 1.7.31 is vulnerable to stored cross-site scripting.

References

External links from the advisory. They lead to third-party sites.