https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:41:00.559867+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-37256 CVE-2020-37256 — Grav - Cross-Site Scripting in Admin Plugin Page Editor 2026-10-06T22:41:00.575208+00:00

Affected: Grav

Grav before 1.6.30 contains a cross-site scripting vulnerability in the Admin plugin page editor default security configuration. Privileged users with page editing capabilities can inject malicious scripts to execute arbitrary code and install malicious plugins for system access.