Em resumo
- CVE-2025-65186 é uma vulnerabilidade MÉDIO (CVSS 6.1) que afeta getgrav/grav, grav (getgrav).
- Chance de exploração nos próximos 30 dias (EPSS): 0.22%, maior que 13.0% das vulnerabilidades.
- Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.
| Package | Affected versions | Patched versions |
|---|
| getgrav/grav Packagist | ≤ 1.7.49
| No fix yet |
| grav | = 1.7.49
| No fix yet |
Description
Grav CMS 1.7.49 is vulnerable to Cross Site Scripting (XSS). The page editor allows authenticated users to edit page content via a Markdown editor. The editor fails to properly sanitize <script> tags, allowing stored XSS payloads to execute when pages are viewed in the admin interface.
NVD description
Grav CMS 1.7.49 is vulnerable to Cross Site Scripting (XSS). The page editor allows authenticated users to edit page content via a Markdown editor. The editor fails to properly sanitize <script> tags, allowing stored XSS payloads to execute when pages are viewed in the admin interface.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free