Threats Tagged 'ghsa-2x7f-7273-jx2j'

CVE-2025-64059 is a low-severity vulnerability in Grav version 1.7.50.2 involving improper neutralization of input during web page generation, leading to potential cross-site scripting (XSS). It allows administrators to enter JavaScript via the Home Page editor. However, the practical risk of stored XSS is debated because administrators already have extensive privileges to modify templates, install plugins, and upload executable content.