medium5.4
CVE-2021-3920
grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Impact
grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Getgrav | Grav-Plugin-Admin | before 1.10.25 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/getgrav/grav-plugin-admin/commit/6463135bf046d8131189c163158cd5db8f7a9675
- https://huntr.dev/bounties/ab564760-90c6-4e1d-80c2-852f45034cd1
- https://github.com/getgrav/grav-plugin-admin/commit/6463135bf046d8131189c163158cd5db8f7a9675
- https://huntr.dev/bounties/ab564760-90c6-4e1d-80c2-852f45034cd1