getgrav

Records229All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical27CVSS 9.0–10.0

CVSS high123CVSS 7.0–8.9

Exploited now

getgrav records in CISA KEV

No getgrav vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Grav 57 records HIGH Grav-plugin-admin 9 records HIGH Grav Cms 5 records MEDIUM Dom-sanitizer 1 record LOW Grav-plugin-api 1 record HIGH Grav Admin 1 record LOW

Records

9 records in Grav-plugin-admin · all components

TI-2021-04523 CVE-2021-21425

Unauthenticated Arbitrary YAML Write/Update leads to Code Execution

HIGH 82

Grav Admin Plugin is an HTML user interface that provides a way to configure Grav and create and modify pages.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.806 Published 2021-04-07 No fix listed CWE-284

TI-2025-40781 CVE-2025-66307 · GHSA-q3qx-cp62-f6m7

Grav Admin Plugin vulnerable to User Enumeration & Email Disclosure

HIGH 68

This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00339 Published 2025-12-01 Fixed in 1.11.0-beta.1, 1.8.0-beta.27 CWE-204

TI-2025-40782 CVE-2025-66308 · GHSA-gqxx-248x-g29f

Cross-site scripting in getgrav grav

MEDIUM 63

This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages.

CVSS 4.0MEDIUM 6.8 Network High privileges User interaction EPSS 0.00229 Published 2025-12-01 Fixed in 1.11.0-beta.1, 1.8.0-beta.27 CWE-79

TI-2025-40786 CVE-2025-66312 · GHSA-rmw5-f87r-w988

Cross-site scripting in getgrav grav

MEDIUM 61

This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages.

CVSS 4.0MEDIUM 6.2 Network High privileges User interaction EPSS 0.00229 Published 2025-12-01 Fixed in 1.11.0-beta.1, 1.8.0-beta.27 CWE-79

TI-2025-40785 CVE-2025-66311 · GHSA-mpjj-4688-3fxg

Grav vulnerable to Cross-Site Scripting (XSS) Stored endpoint `/admin/pages/[page]` in Multiples parameters

MEDIUM 61

This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages.

CVSS 4.0MEDIUM 6.2 Network High privileges User interaction EPSS 0.00229 Published 2025-12-01 Fixed in 1.11.0-beta.1 CWE-79

TI-2025-40784 CVE-2025-66310 · GHSA-7g78-5g5g-mvfj

Cross-site scripting in getgrav grav

MEDIUM 61

This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages.

CVSS 4.0MEDIUM 6.2 Network High privileges User interaction EPSS 0.00229 Published 2025-12-01 Fixed in 1.11.0-beta.1, 1.8.0-beta.27 CWE-79

TI-2025-40783 CVE-2025-66309 · GHSA-65mj-f7p4-wggq

Cross-site scripting in getgrav grav

MEDIUM 61

This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages.

CVSS 4.0MEDIUM 6.2 Network High privileges User interaction EPSS 0.00247 Published 2025-12-01 Fixed in 1.11.0-beta.1, 1.8.0-beta.27 CWE-79

TI-2021-02730 CVE-2021-3799 · GHSA-vxv9-wpm2-64cm

Improper Restriction of Rendered UI Layers or Frames in getgrav/grav-plugin-admin

LOW 28

grav-plugin-admin is vulnerable to Improper Restriction of Rendered UI Layers or Frames

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01598 Published 2021-09-27 Fixed in 1.10.20 CWE-1021

TI-2021-02829 CVE-2021-3920 · GHSA-86p4-m52q-r4qx

Cross-site Scripting (XSS) - Stored in getgrav/grav-plugin-admin

LOW 27

grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01374 Published 2021-11-19 Fixed in 1.10.25 CWE-79

Open these records in search →