repository icon
getgrav / grav Project repository

Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS powered by PHP, Markdown, Twig, and Symfony

Submit a report

FIRST INTERACTION

WITHIN10 DAYS

REVIEW

WITHIN38 DAYS

FIX

WITHIN54 DAYS

HTML File Upload to XSS
universe1122
pending
Remote Code Execution by uploading a phar file using frontmatter
universe1122
pending
Cross Site Scripting (XSS) - Stored
sahildari
pending
Server Side Request Forgery (SSRF)
scgajge12
pending
Server Side Template Injection (SSTI)
scgajge12
informative
Critical
Multiple Reflected Cross Site Scripting
choocs
not applicable
Server Side Template Injection (Bypass CVE-2022-2073 )
ngbthg101
pending
Server Side Template Injection bypass filter in getgrav/grav
kontonfon
pending
Insufficient Session Expiration
vautia
pending
Server Side Template Injection
ooggle
pending
Local Command Injection Post-Installation of Dependencies
dwisiswant0
Low
Stored XSS - Fix for on* events bypass
kubolos231
not applicable
While storing profile image EXIF metadata not get stripped/removed for which its...
rajbabai8
pending
Server Side Template Injection
effectrenan
Critical
•$95•CVE-2022-2073
stored xss
ranjit-git
High
•$70•CVE-2022-1173
Metadata is not stripped from images
akshayravic09yc47
self closed
The grav application allows large characters to insert in the input field "Full...
akshayravic09yc47
None
Cross-site Scripting (XSS) - Stored
416e6e61
High
•$50•CVE-2022-0970
Cross-site Scripting (XSS) - Stored
r0hansh
Medium
•$50•CVE-2022-0743
Cross-site Scripting (XSS) - Stored
r0hansh
Medium
•$92.5•CVE-2022-0268
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
takester
Medium
Path Traversal
takester
High
•CVE-2021-3924
Cross-site Scripting (XSS) - Stored
effectrenan
Medium
•$75•CVE-2021-3904
Reliance on Cookies without Validation and Integrity Checking
1esvee1
Medium
•CVE-2021-3818
Reliance on Cookies without Validation and Integrity Checking
wr3nch0x1
Medium
•$150
Cross-site Scripting (XSS) - Stored
effectrenan
High
•$150