Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

W00Fz

#50414of 53,625
4.6Total CVSS
Vulnerabilities · 1
PT-2022-13404
4.6
2022-02-28
Unknown · Getgrav/Grav · CVE-2022-0743
**Name of the Vulnerable Software and Affected Versions** getgrav/grav versions prior to 1.7.31 **Description** The issue is related to Cross-site Scripting (XSS) - Stored, where user input is not properly sanitized, leading to potential cross-site scripting. This type of attack occurs when an application includes user input in its output without proper validation, allowing an attacker to inject malicious scripts into the application. **Recommendations** For versions prior to 1.7.31, update to version 1.7.31 or later to resolve the issue. As a temporary workaround, consider implementing proper input sanitization to prevent cross-site scripting attacks. Restrict access to user input fields to minimize the risk of exploitation until the issue is resolved.