Getgrav Grav

Grav Arbitrary File Read to Account Takeover

Grav Server Side Template Injection vulnerability

GravCMS 1.10.7 - Arbitrary YAML Write/Update (Unauthenticated) (2)

Cross Site Scripting vulnerability in grav v.1.7.48 and before allows an attacker to execute arbitrary code via a crafted script to the form fields

Grav ihas Broken Access Control which allows an Editor to modify the page's YAML Frontmatter to alter form processing actions

Code Injection in getgrav/grav

Grav: Unauthenticated Path Traversal & Arbitrary File Write in FormFlash component.

In grav <1.7.49.5, a SSRF (Server-Side Request Forgery) vector may be triggered via Twig templates when page content is processed by Twig and the configuration allows undefined PHP functions to be registered

Grav: Stored XSS via Tag Injection

Grav File Upload Path Traversal vulnerability

Server-Side Template Injection (SSTI) with Grav CMS security sandbox bypass

Grav Server-side Template Injection (SSTI) via Twig Default Filters

Path Traversal in getgrav/grav

Grav is vulnerable to RCE via SSTI through Twig Sandbox Bypass

Server-side Template Injection (SSTI) in grav

Grav vulnerable to Server-side Template Injection (SSTI) via Denylist Bypass

Grav Server-side Template Injection via Insufficient Validation in filterFilter

Grav vulnerable to Server Side Template Injection (SSTI) via Twig escape handler

Grav vulnerable to Server Side Template Injection (SSTI)

Remote Code Execution by uploading a phar file using frontmatter

Grav vulnerable to Server Side Template Injection (SSTI)

Grav vulnerable to Privilege Escalation and Authenticated Remote Code Execution via Twig Injection

Cross Site Scripting vulnerability in grav v.1.7.48, v.1.7.47 and v.1.7.46 allows an attacker to execute arbitrary code via the onerror attribute of the img element

Security Sandbox Bypass with SSTI (Server Side Template Injection) in the Grav CMS

Grav vulnerable to Path traversal / arbitrary YAML write via user creation leading to Account Takeover / System Corruption

Grav: Low-privileged API users can create super-admin accounts via blueprint-upload

Grav vulnerable to Privilege Escalation in Grav Admin: Missing Username Uniqueness Check Allows Admin Account Takeover

Grav is vulnerable to Arbitrary File Read

Grav: Publisher-Level Stored XSS via Unquoted Event Attributes

Twig allowing dangerous PHP functions by default

stored xss in getgrav/grav

A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to upload a malicious plugin via the /admin/tools/direct-install interface. Once uploaded, the plugin is automatically extracted and loaded, allowing arbitrary PHP code execution and reverse shell access.

Grav: Administrative Account Disruption and Privilege De-escalation via User Overwrite Logic

Grav: Twig sandbox allows editor-role users to exfiltrate all plugin secrets via Config::toArray()

Grav is vulnerable to Server-Side Template Injection (SSTI) via Forms

Grav CMS v1.7.x and before is vulnerable to XML External Entity (XXE) through the SVG file upload functionality in the admin panel and File Manager plugin.

Grav Exposes Password Hashes Leading to privilege escalation

Cross-site Scripting (XSS) - Stored in getgrav/grav

Grav CMS — Improper Handling of Highly Compressed Data in Installer::unZip()

Grav vulnerable to Denial of Service via Improper Input Handling in 'Supported' Parameter