← All advisories

Critical severity9.8NVD Advisory· Published Jul 25, 2025· Updated Jun 17, 2026

CVE-2025-46199

CVE-2025-46199

Description

Cross Site Scripting vulnerability in grav v.1.7.48 and before allows an attacker to execute arbitrary code via a crafted script to the form fields

Affected products

2

Grav CMS/GravCMScpe-rescue
Grav CMS/Gravllm-fuzzy
Range: <=1.7.48

Patches

Vulnerability mechanics

References

2

rapid-echo-f9c.notion.site/Grav-XSS-25-04-21-1dcaf8998a078001a2eff3dc47974d6dnvdExploitThird Party Advisory
tyojong.tistory.com/2nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.