Known vulnerabilities in Form plugin for Grav CMS
Vendor:
Grav CMS
Software:
Form plugin for Grav CMS
Software CPE:
cpe:2.3:a:getgrav:grav-plugin-form:*:*:*:*:*:grav:*:*
Website:
https://getgrav.org/
Total vulnerabilities:
3
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
9.1.24
9.1.23
9.1.22
9.1.21
9.1.20
9.1.19
9.1.18
9.1.17
9.1.16
9.1.15
9.1.14
9.1.13
9.1.12
9.1.11
9.1.10
9.1.9
9.1.8
9.1.7
9.1.6
9.1.5
9.1.4
9.1.3
9.1.2
9.1.1
8.2.1
8.2.0
8.1.0
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.4.2
7.4.1
7.4.0
7.3.0
7.1.3
7.1.2
7.1.1
7.1.0
7.0.2
7.0.1
7.0.0
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
5.1.7
5.1.6
5.1.5
5.1.4
5.1.3
5.1.2
5.1.1
5.1.0
5.0.3
5.0.2
5.0.1
5.0.0
4.3.1
4.3.0
4.2.0
4.1.2
4.1.1
4.1.0
4.0.10
4.0.9
4.0.8
4.0.7
4.0.6
4.0.5
4.0.4
4.0.3
4.0.2
4.0.1
4.0.0
3.0.9
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
2.16.4
2.16.3
2.16.2
2.16.1
2.16.0
2.15.1
2.15.0
2.14.1
2.14.0
2.13.3
2.13.2
2.13.1
2.13.0
2.12.0
2.11.5
2.11.4
2.11.3
2.11.2
2.11.1
2.11.0
2.10.0
2.9.3
2.9.2
2.9.1
2.9.0
2.8.2
2.8.1
2.8.0
2.7.0
2.6.0
2.5.0
2.4.0
2.3.1
2.3.0
2.2.0
2.1.1
2.1.0
2.0.10
2.0.9
2.0.8
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
1.3.2
1.3.1
1.3.0
1.2.2
1.2.1
1.2.0
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.3
1.0.2
1.0.1
1.0.0
0.7.0
0.6.0
0.5.0
0.4.0
0.3.0
0.2.1
0.2.0
0.1.0
9.1.0
9.0.3
9.0.2
9.0.1
9.0.0
7.2.2
7.2.1
7.2.0
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU138912 - URL Redirection to Untrusted Site ('Open Redirect') |
CWE-601 | Low | 9.1.13 | 21.07.2026 |
SB2026072189 |
||
| #VU130090 - Improper Access Control CVE-2026-42845 |
CWE-284 | Medium | 9.1.0 | 05.05.2026 |
SB2026052048 |
||
| #VU130048 - Unrestricted Upload of File with Dangerous Type CVE-2024-27923 |
CWE-434 | Medium | 7.2.2 | 04.03.2024 |
SB2024030447 |