Vulnerabilities

TI-2025-40786 CVE-2025-66312 · GHSA-rmw5-f87r-w988

Cross-site scripting in getgrav grav

MEDIUM 61

This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages.

CVSS 4.0MEDIUM 6.2 Network High privileges User interaction EPSS 0.00229 Published 2025-12-01 Fixed in 1.11.0-beta.1, 1.8.0-beta.27 CWE-79

TI-2025-40785 CVE-2025-66311 · GHSA-mpjj-4688-3fxg

MEDIUM 61

This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages.

CVSS 4.0MEDIUM 6.2 Network High privileges User interaction EPSS 0.00229 Published 2025-12-01 Fixed in 1.11.0-beta.1 CWE-79

TI-2025-40784 CVE-2025-66310 · GHSA-7g78-5g5g-mvfj

MEDIUM 61

This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages.

CVSS 4.0MEDIUM 6.2 Network High privileges User interaction EPSS 0.00229 Published 2025-12-01 Fixed in 1.11.0-beta.1, 1.8.0-beta.27 CWE-79

TI-2025-40783 CVE-2025-66309 · GHSA-65mj-f7p4-wggq

MEDIUM 61

This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages.

CVSS 4.0MEDIUM 6.2 Network High privileges User interaction EPSS 0.00247 Published 2025-12-01 Fixed in 1.11.0-beta.1, 1.8.0-beta.27 CWE-79

TI-2025-40782 CVE-2025-66308 · GHSA-gqxx-248x-g29f

MEDIUM 63

This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages.

CVSS 4.0MEDIUM 6.8 Network High privileges User interaction EPSS 0.00229 Published 2025-12-01 Fixed in 1.11.0-beta.1, 1.8.0-beta.27 CWE-79

TI-2025-40781 CVE-2025-66307 · GHSA-q3qx-cp62-f6m7

HIGH 68

This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00339 Published 2025-12-01 Fixed in 1.11.0-beta.1, 1.8.0-beta.27 CWE-204

TI-2021-02829 CVE-2021-3920 · GHSA-86p4-m52q-r4qx

LOW 27

grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01374 Published 2021-11-19 Fixed in 1.10.25 CWE-79

TI-2021-02730 CVE-2021-3799 · GHSA-vxv9-wpm2-64cm

LOW 28

grav-plugin-admin is vulnerable to Improper Restriction of Rendered UI Layers or Frames

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01598 Published 2021-09-27 Fixed in 1.10.20 CWE-1021

TI-2021-04523 CVE-2021-21425

HIGH 82

Grav Admin Plugin is an HTML user interface that provides a way to configure Grav and create and modify pages.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.806 Published 2021-04-07 No fix listed CWE-284