| Package | Affected versions | Patched versions |
|---|---|---|
| getgrav/grav | ≤ 1.7.49 | |
| grav | = 1.7.49 |
Grav CMS 1.7.49 is vulnerable to Cross Site Scripting (XSS). The page editor allows authenticated users to edit page content via a Markdown editor. The editor fails to properly sanitize <script> tags, allowing stored XSS payloads to execute when pages are viewed in the admin interface.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free