CVE-2024-35498
1 advisory.
Packagist/getgrav/grav CVE-2024-35498: low, EPSS 0.39%
Grav Cross-site Scripting vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.7.45 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-m78c-qx99-mvw9
- https://nvd.nist.gov/vuln/detail/CVE-2024-35498
- https://github.com/getgrav/grav
- https://github.com/r4vanan/Stored-xss-Grav-v1.7.45
- https://r4vanan.medium.com/a-quick-dive-into-xss-vulnerability-in-grav-cms-v1-7-45-cve-2024-35498-fc236b7d74a0
CVE-2024-35498 · published · modified · JSON