Threats Tagged 'ghsa-5xgg-wmqq-qr2g'

1 threat

Threats Tagged 'ghsa-5xgg-wmqq-qr2g'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.1	EPSS 0.3%	CVE-2026-85599grav-plugin-shortcode-core · Cross-site Scripting Medium5.1EPSS 0.3%2026-09-04CVE Database V5CVE-2026-85599 Grav Shortcode Core versions before 6.2.5 contain stored cross-site scripting (XSS) vulnerabilities in the [lorem] tag parameter and [details] summary parameter. These parameters are rendered without proper escaping, allowing attackers with page-edit access to inject arbitrary HTML and JavaScript. This malicious code executes in the browsers of all visitors to the affected pages, including administrators. EPSS 0.3%Vulnerability getgrav #ghsa-5xgg-wmqq-qr2g	CVE Database V5	2026-09-04

Showing 1–1 of 1 result