Vulnerabilities > Getgrav > Grav
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-05-15 | CVE-2024-34082 | Unspecified vulnerability in Getgrav Grav Grav is a file-based Web platform. | 9.9 |
| 2024-03-21 | CVE-2024-27921 | Path Traversal vulnerability in Getgrav Grav Grav is an open-source, flat-file content management system. | 8.8 |
| 2024-03-21 | CVE-2024-28116 | Code Injection vulnerability in Getgrav Grav Grav is an open-source, flat-file content management system. | 8.8 |
| 2024-03-21 | CVE-2024-28117 | Code Injection vulnerability in Getgrav Grav Grav is an open-source, flat-file content management system. | 8.8 |
| 2024-03-21 | CVE-2024-28118 | Code Injection vulnerability in Getgrav Grav Grav is an open-source, flat-file content management system. | 8.8 |
| 2024-03-21 | CVE-2024-28119 | Code Injection vulnerability in Getgrav Grav Grav is an open-source, flat-file content management system. | 8.8 |
| 2024-03-21 | CVE-2024-27923 | Unrestricted Upload of File with Dangerous Type vulnerability in Getgrav Grav Grav is a content management system (CMS). | 8.8 |
| 2024-02-09 | CVE-2023-31506 | Cross-site Scripting vulnerability in Getgrav Grav A cross-site scripting (XSS) vulnerability in Grav versions 1.7.44 and before, allows remote authenticated attackers to execute arbitrary web scripts or HTML via the onmouseover attribute of an ISINDEX element. | 5.4 |
| 2023-07-18 | CVE-2023-37897 | Unspecified vulnerability in Getgrav Grav 1.7.42/1.7.42.1 Grav is a file-based Web-platform built in PHP. | 8.8 |
| 2023-06-14 | CVE-2023-34253 | Code Injection vulnerability in Getgrav Grav Grav is a flat-file content management system. | 7.2 |