CVE-2020-37256 — Grav - Cross-Site Scripting in Admin Plugin Page Editor
Grav before 1.6.30 contains a cross-site scripting vulnerability in the Admin plugin page editor default security configuration. Privileged users with page editing capabilities …
Published: 2026-06-25 · CVSS: 5.1 · CVSS 4.0
Grav before 1.6.30 contains a cross-site scripting vulnerability in the Admin plugin page editor default security configuration. Privileged users with page editing capabilities can inject malicious scripts to execute arbitrary code and install malicious plugins for system access.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7