Vulnerabilities > Getgrav > Grav > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-02-09 | CVE-2023-31506 | Cross-site Scripting vulnerability in Getgrav Grav A cross-site scripting (XSS) vulnerability in Grav versions 1.7.44 and before, allows remote authenticated attackers to execute arbitrary web scripts or HTML via the onmouseover attribute of an ISINDEX element. | 5.4 |
| 2023-06-14 | CVE-2023-34452 | Unspecified vulnerability in Getgrav Grav Grav is a flat-file content management system. | 6.1 |
| 2022-04-26 | CVE-2022-1173 | Cross-site Scripting vulnerability in Getgrav Grav stored xss in GitHub repository getgrav/grav prior to 1.7.33. | 5.4 |
| 2022-03-15 | CVE-2022-0970 | Cross-site Scripting vulnerability in Getgrav Grav Cross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31. | 5.4 |
| 2022-02-28 | CVE-2022-0743 | Cross-site Scripting vulnerability in Getgrav Grav Cross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31. | 4.6 |
| 2022-01-25 | CVE-2022-0268 | Unspecified vulnerability in Getgrav Grav Cross-site Scripting (XSS) - Stored in Packagist getgrav/grav prior to 1.7.28. | 5.4 |
| 2021-10-27 | CVE-2021-3904 | Unspecified vulnerability in Getgrav Grav grav is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 5.4 |
| 2021-09-27 | CVE-2021-3818 | Reliance on Cookies without Validation and Integrity Checking vulnerability in Getgrav Grav grav is vulnerable to Reliance on Cookies without Validation and Integrity Checking | 5.3 |
| 2020-04-04 | CVE-2020-11529 | Open Redirect vulnerability in Getgrav Grav Common/Grav.php in Grav before 1.7 has an Open Redirect. | 6.1 |