GR
Product
grav-plugin-shortcode-core
2
CVEs
0
On KEV
8.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add grav-plugin-shortcode-core to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-64851 | 8.5 | Aug 19 | Grav Shortcode Core Plugin: Stored XSS in shortcode-core attribute handlers Affected: < 6.2.2 |
| CVE-2026-85599 | 7.2 | Sep 4 | Grav Shortcode Core before 6.2.5 Stored XSS via unescaped parameters Affected: before 6.2.5 |
Showing 2