{"action":"Upgrade getgrav/grav to 2.0.15 or later.","affected":[{"fixed":"2.0.15","introduced":"0"}],"component":"getgrav/grav","cve_ids":["CVE-2026-75831"],"ecosystem":"Packagist","epss":0.0035,"exploited":false,"fixed_versions":["2.0.15"],"ghsa_id":"GHSA-6qw9-4vv5-jr97","id":"tcs_01M5KEXAGXEMWKHH5X4Q3TG9YV","modified_at":"2026-09-17T17:45:04.317317389Z","published_at":"2026-09-17T17:31:41Z","references":["https://osv.dev/vulnerability/GHSA-6qw9-4vv5-jr97","https://github.com/getgrav/grav/security/advisories/GHSA-6qw9-4vv5-jr97","https://nvd.nist.gov/vuln/detail/CVE-2026-75831","https://github.com/getgrav/grav/commit/aba291a59cab29ddce491175791888d8d0b65e20","https://github.com/getgrav/grav","https://www.vulncheck.com/advisories/grav-before-stored-xss-via-audio-video-source-url"],"severity":{"label":"high","score":7.6},"sources":[{"source":"osv","source_id":"GHSA-6qw9-4vv5-jr97","url":"https://osv.dev/vulnerability/GHSA-6qw9-4vv5-jr97"}],"summary":"Grav: Stored XSS via Markdown audio/video media <source> URL"}