high8.8
CVE-2025-46198
Cross Site Scripting vulnerability in grav v.1.7.48, v.1.7.47 and v.1.7.46 allows an attacker to execute arbitrary code via the onerror attribute of the img el…
Impact
Cross Site Scripting vulnerability in grav v.1.7.48, v.1.7.47 and v.1.7.46 allows an attacker to execute arbitrary code via the onerror attribute of the img element
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Getgrav | Grav | from 1.7.46 through 1.7.48 |