medium6.3
CVE-2021-3904
Cross-Site Scripting in grav
Impact
grav prior to version 1.7.24 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | getgrav/grav | < 1.7.24 | 1.7.24 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Getgrav | Grav | before 1.7.24 |