CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 1CVE-2022-2073 – Code Injection in getgrav/grav
https://notcve.org/view.php?id=CVE-2022-2073
Code Injection in GitHub repository getgrav/grav prior to 1.7.34. Una Inyección de Código en el repositorio GitHub getgrav/grav versiones anteriores a 1.7.34 • https://github.com/getgrav/grav/commit/9d6a2dba09fd4e56f5cdfb9a399caea355bfeb83 https://huntr.dev/bounties/3ef640e6-9e25-4ecb-8ec1-64311d63fe66 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 8.2EPSS: 0%CPEs: 1EXPL: 1CVE-2022-1173 – stored xss in getgrav/grav
https://notcve.org/view.php?id=CVE-2022-1173
stored xss in GitHub repository getgrav/grav prior to 1.7.33. Una vulnerabilidad de tipo xss almacenado en el repositorio de GitHub getgrav/grav versiones anteriores a 1.7.33 • https://github.com/getgrav/grav/commit/1c0ed43afa5dc14169e6aa693b38e1a2f7aecad9 https://huntr.dev/bounties/b6016e95-9f48-4945-89cb-199b6e072218 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 1CVE-2022-0970 – Cross-site Scripting (XSS) - Stored in getgrav/grav
https://notcve.org/view.php?id=CVE-2022-0970
Cross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31. Una vulnerabilidad de tipo Cross-site Scripting (XSS) - Almacenado en el repositorio de GitHub getgrav/grav versiones anteriores a 1.7.31 • https://github.com/getgrav/grav/commit/f19297d5f70476e7bedae9f2acef6b43615538b8 https://huntr.dev/bounties/dd436c44-cbf4-48ac-8817-3a24872534ec • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.6EPSS: 0%CPEs: 1EXPL: 1CVE-2022-0743 – Cross-site Scripting (XSS) - Stored in getgrav/grav
https://notcve.org/view.php?id=CVE-2022-0743
Cross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31. Una vulnerabilidad de tipo Cross-site Scripting (XSS) - Almacenado en el repositorio GitHub getgrav/grav versiones anteriores a 1.7.31. • https://github.com/getgrav/grav/commit/3dd0cabeac9835fe64dcb4b68c658b39f1f6be2f https://huntr.dev/bounties/32ea4ddb-5b41-4bf9-b5a1-ef455fe2d293 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.7EPSS: 0%CPEs: 1EXPL: 1CVE-2022-0268 – Cross-site Scripting (XSS) - Stored in getgrav/grav
https://notcve.org/view.php?id=CVE-2022-0268
Cross-site Scripting (XSS) - Stored in Packagist getgrav/grav prior to 1.7.28. Una vulnerabilidad de tipo Cross-site Scripting (XSS) - Almacenado en Packagist getgrav/grav versiones anteriores a 1.7.28 • https://github.com/getgrav/grav/commit/6f2fa9311afb9ecd34030dec2aff7b39e9e7e735 https://huntr.dev/bounties/67085545-331e-4469-90f3-a1a46a078d39 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •