What’s Vulnerable › Products

getgrav grav-plugin-guestbook vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your getgrav grav-plugin-guestbook version is affected

Latest getgrav grav-plugin-guestbook vulnerabilities

• CVE-2026-109322 — Grav Guestbook before 0.5.2 Stored XSS via AJAX Pagination and Admin Views (CVSS 6.1)
• CVE-2026-109319 — Grav Guestbook Plugin 0.5.0 and 0.5.1 Missing Authorization and CSRF in Moderation (CVSS 4.3)