Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Grav CMS 1.7.49 is vulnerable to Cross Site Scripting (XSS). The page editor allows authenticated users to edit page content via a Markdown editor. The editor fails to properly sanitize <script> tags, allowing stored XSS payloads to execute when pages are viewed in the admin interface.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Grav CMS 跨站脚本漏洞
Vulnerability Description
Grav CMS是Grav开源的一个基于文件的扁平化内容管理系统。 Grav CMS 1.7.49版本存在跨站脚本漏洞，该漏洞源于页面编辑器未正确清理script标签，可能导致存储型跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A