getgrav/grav vulnerabilities (Packagist)
105 vulnerabilities.
getgrav/gravPackagistGrav before 2.0.16 Information Disclosure via Twig Sandbox8.7 Highgetgrav/gravPackagistGrav before 2.0.16 Information Disclosure via offsetGet8.7 Highgetgrav/gravPackagistGrav CMS before 2.0.16 Origin Validation Bypass via Referer9.3 Criticalgetgrav/gravPackagistGrav CMS before 2.0.16 Timing Attack via verifyNonce6.3 Mediumgetgrav/gravPackagistGrav CMS before 2.0.16 Information Disclosure via Twig Sandbox Bypass7.1 Highgetgrav/gravPackagistGrav CMS before 2.0.16 Path Traversal via media_directory7.1 Highgetgrav/gravPackagistGrav before 2.0.16 Path Traversal via MediaUploadTrait deleteFile7.1 Highgetgrav/gravPackagistGrav before 2.0.20 Cross-Site Scripting via Assets Sandbox5.1 Mediumgetgrav/gravPackagistGrav before 2.0.14 Privilege Escalation via Group Access Field9.3 Criticalgetgrav/gravPackagistGrav before 2.0.14 Stored XSS via Invalid UTF-8 Byte5.1 Mediumgetgrav/gravPackagistGrav before 2.0.15 Stored XSS via audio/video source URL5.1 Mediumgetgrav/gravPackagistGrav before 2.0.15 Stored XSS via detectXss() Quote Bypass9.3 Criticalgetgrav/gravPackagistGrav before 2.0.15 Arbitrary File Write via error_log9.3 Criticalgetgrav/gravPackagistGrav before 2.0.15 Path Traversal via plugin-asset-map.php8.2 Highgetgrav/gravPackagistGrav before 2.0.13 Stored XSS via quoted-attribute bypass5.1 Mediumgetgrav/gravPackagistGrav CMS before 2.0.13 Remote Code Execution via ZIP Upload8.7 Highgetgrav/gravPackagistGrav CMS before 2.0.11 Path Traversal via watermark8.7 Highgetgrav/gravPackagistGrav CMS 2.0.7 through 2.0.10 Arbitrary Method Invocation via Blueprint8.6 Highgetgrav/gravPackagistGrav before 2.0.9 Remote Code Execution via FlexDirectory8.7 Highgetgrav/gravPackagistGrav: Remote code execution via unrestricted callable in Blueprint::dynamicData()8.7 Highgetgrav/gravPackagistGrav before 2.0.7 Remote Code Execution via Blueprint dynamicData9.3 Criticalgetgrav/gravPackagistGrav: Authenticated ReDoS via regex_replace in Twig Sandbox6.0 Mediumgetgrav/gravPackagistGrav < 2.0.4 ReDoS via regex_replace in Sandbox6.0 Mediumgetgrav/gravPackagistGrav Login Plugin: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge7.4 Highgetgrav/gravPackagistGrav < 2.0.4 2FA Bypass via Secret Regeneration9.1 Criticalgetgrav/gravPackagistGrav: .htaccess file extension rules bypass via case variation on case-insensitive filesystems8.2 Highgetgrav/gravPackagistGrav < 2.0.4 File Access Bypass via Case Variation8.7 Highgetgrav/gravPackagistGrav before 2.0.1 XSS via Twig String Concatenation5.1 Mediumgetgrav/gravPackagistGrav before 2.0.2 Decompression Bomb via Forged ZIP Size7.1 Highgetgrav/gravPackagistGrav CMS — Improper Handling of Highly Compressed Data in Installer::unZip()6.9 Mediumgetgrav/gravPackagistGrav: Unauthenticated denial of service via unbounded image derivative dimensions8.7 Highgetgrav/gravPackagistGrav: Decompression Bomb via ZipArchiver - Missing Extraction Limits6.5 Mediumgetgrav/gravPackagistGrav: Twig sandbox config exfiltration via grav.offsetGet + dump filter (CVE-2026-44738 bypass)6.5 Mediumgetgrav/gravPackagistGrav before 2.0.1 Decompression Bomb via ZipArchiver7.1 Highgetgrav/gravPackagistGrav before 2.0.2 Config Exfiltration via offsetGet Filter7.1 Highgetgrav/gravPackagistGrav - Stored CSS Injection via Markdown Image resize() Action4.8 Mediumgetgrav/gravPackagistGrav: Stored CSS injection via Markdown image ?style=… reaches MediaObjectTrait::style()4.8 Mediumgetgrav/gravPackagistGrav: Admin Backup Zip File Exposes Account Credentials and Configuration Secrets6.8 Mediumgetgrav/gravPackagistGrav: Twig sandbox allows editor-role users to exfiltrate all plugin secrets via Config::toArray()7.7 Highgetgrav/gravPackagistgrav-plugin-admin: Stored Cross-Site Scripting (XSS) Reflected endpoint /admin/pages/[page], parameter data[header][title]6.2 Mediumgetgrav/gravPackagistGrav: Low-privileged API users can create super-admin accounts via blueprint-upload8.7 Highgetgrav/gravPackagistGrav: Stored XSS via Tag Injection8.9 Highgetgrav/gravPackagistGrav - XML External Entity Injection via SVG Upload7.1 Highgetgrav/gravPackagistGrav: Unauthenticated Path Traversal & Arbitrary File Write in FormFlash component.8.8 Highgetgrav/gravPackagistGrav: Administrative Account Disruption and Privilege De-escalation via User Overwrite Logic8.1 Highgetgrav/gravPackagistGrav - Multiple Remote Code Execution Vulnerabilities via Unsafe Unserialize and Command Injection9.3 Criticalgetgrav/gravPackagistGrav: Publisher-Level Stored XSS via Unquoted Event Attributes8.5 Highgetgrav/gravPackagistGrav: Sensitive Information Disclosure via Accounts Service Bypass6.5 Mediumgetgrav/gravPackagistGrav: Privilege Escalation via Missing Server-Side Validation of groups/access9.4 Criticalgetgrav/gravPackagistgrav-plugin-form: XSS via Taxonomy Field Values in Admin Panel5.4 Medium- Show olderLoading…