Threats tagged 'ghsa-3mpx-xv5p-92mv'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.1	EPSS 0.2%	CVE-2026-72821getgrav grav · Cross-site Scripting Medium5.1EPSS 0.2%2026-08-14CVE Database V5CVE-2026-72821 Grav Form plugin versions before 9.1.15 contain a stored cross-site scripting vulnerability in radio and toggle field option labels rendered with the Twig \|raw filter. Attackers with form authoring permissions can inject HTML and script payloads in option labels that execute in the browsers of visitors and administrators viewing the form. EPSS 0.2%Vulnerability #ghsa-3mpx-xv5p-92mv	CVE Database V5	2026-08-14

Page 1 of 1