Grav Cross-site Scripting vulnerability
Date: 2025-01
Affected: composer/getgrav/grav
Attack vector: xss
Category: vulnerability-disclosure
Severity: Low
CVE: CVE-2024-35498
CWE: CWE-79

A cross-site scripting (XSS) vulnerability in Grav v1.7.45 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.


Mitigations:

Architectural layers (MAESTRO):