CVE-2024-35498

描述

A cross-site scripting (XSS) vulnerability in Grav v1.7.45 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

受影響套件(1)

• Packagist/getgrav/gravfrom 0, <= 1.7.45

CVSS 分數

參考連結(4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2024-35498
• PATCHhttps://github.com/getgrav/grav
• WEBhttps://github.com/r4vanan/Stored-xss-Grav-v1.7.45
• WEBhttps://r4vanan.medium.com/a-quick-dive-into-xss-vulnerability-in-grav-cms-v1-7-45-cve-2024-35498-fc236b7d74a0