medium6.1
CVE-2019-16126
Grav through 1.6.15 allows (Stored) Cross-Site Scripting due to JavaScript execution in SVG images.
Impact
Grav through 1.6.15 allows (Stored) Cross-Site Scripting due to JavaScript execution in SVG images.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Getgrav | Grav Cms | through 1.6.15 |