CVE-2021-3904
1 advisory.
Packagist/getgrav/grav CVE-2021-3904: medium 6.3
Cross-Site Scripting in grav
Action: Upgrade getgrav/grav to 1.7.24 or later.
composer require getgrav/grav:1.7.24Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.24 | - |
Fixed versions
| 1.7.24 |
Sources
- osv: GHSA-5jxc-hmqf-3f73
- https://nvd.nist.gov/vuln/detail/CVE-2021-3904
- https://github.com/getgrav/grav/commit/afc69a3229bb6fe120b2c1ea27bc6f196ed7284d
- https://github.com/getgrav/grav
- https://huntr.dev/bounties/b1182515-d911-4da9-b4f7-b4c341a62a8d
CVE-2021-3904 · published · modified · JSON