VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 25, 2025· Updated Jul 25, 2025

CVE-2025-46198

CVE-2025-46198

Description

Cross Site Scripting vulnerability in grav v.1.7.48, v.1.7.47 and v.1.7.46 allows an attacker to execute arbitrary code via the onerror attribute of the img element

Affected products

2
  • grav/gravdescription
  • Getgrav/Gravllm-fuzzy
    Range: 1.7.46, 1.7.47, 1.7.48

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.