VYPR

Grav Data Manager

by Grav CMS

CVEs (1)

  • CVE-2026-100673HigSep 26, 2026
    risk 0.53cvss 8.2epss —

    The Grav Data Manager plugin (getgrav/grav-plugin-datamanager) versions 1.0.1 through 1.4.4 render stored data entries in the item-detail view (admin/templates/partials/item.html.twig) without escaping, applying Twig's `raw` filter — in some cases after a striptags('')…