Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-46198
8.8
HIGHCVSS v3
Published
July 25, 2025
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Cross Site Scripting vulnerability in grav v.1.7.48, v.1.7.47 and v.1.7.46 allows an attacker to execute arbitrary code via the onerror attribute of the img element
getgrav/grav
GitHubModern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS powered by PHP, Markdown, Twig, and Symfony
GitHubModern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS powered by PHP, Markdown, Twig, and Symfony>= 1.7.46, <= 1.7.48NVD
getgrav/grav
PackagistModern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS
PackagistModern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS>= 1.7.46, <= 1.7.48NVD