Login Request a demo
GC
Product
Grav Cms
by Getgrav · last CVE Mar 15, 2021
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 2Medium 3Low 0
Severity
All severities5Critical0High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Grav Cms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-29553
8.8
1%
Mar 15
The Scheduler in Grav CMS through 1.7.0-rc.17 allows an attacker to execute a system command by tricking an admin into visiting a malicious website (CSRF)
Affected: through 1.6.31; 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; +22 more
CVE-2020-29555
8.1
3%
Mar 15
The BackupDelete functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to delete arbitrary files on the underlying server by exploiting a path-traversal…
Affected: before 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; +23 more
CVE-2019-16126
6.1
2%
Sep 9
Grav through 1.6.15 allows (Stored) Cross-Site Scripting due to JavaScript execution in SVG images
Affected: through 1.6.15
CVE-2018-5233
6.1
4%
Mar 19
Cross-site scripting (XSS) vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via the…
Affected: before 1.3.0
CVE-2020-29556
5.5
1%
Mar 15
The Backup functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to read arbitrary local files on the underlying server by exploiting a path-traversal…
Affected: before 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; +23 more
Showing 5