Known vulnerabilities in Grav CMS - page 4

Vendor: Grav CMS
Software: Grav CMS
Software CPE: cpe:2.3:a:getgrav:grav:*:*:*:*:*:*:*:*
Total vulnerabilities: 65
Public exploits: 7
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Grav CMS Grav CMS is affected by 65 known vulnerabilities: 8 high, 22 medium, 35 low Critical High Medium Low

Vulnerabilities (65)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU52363 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-29440
CWE-94 Medium
Available
No
1.7.11 20.04.2021 SB2021042006
#VU130046 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-37256
CWE-79 Low
No
No
1.6.30 10.12.2020 SB2020121038
#VU30315 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-11529
CWE-601 Low
No
No
1.6.23 04.04.2020 SB2020040411
#VU20943 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-5233
CWE-79 Low
No
No
1.3.0 09.09.2019 SB2018031917
#VU20942 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16126
CWE-79 Low
No
No
1.7.0 09.09.2019 SB2019090901


Showing elements 61 - 80 out of 65