What’s Vulnerable › Vulnerabilities

CVE-2025-46199

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-07-25 · updated 2026-06-17
• Weakness: CWE-79

Description

Cross Site Scripting vulnerability in grav v.1.7.48 and before allows an attacker to execute arbitrary code via a crafted script to the form fields

Affected products

• getgrav grav: through 1.7.48

References

• https://rapid-echo-f9c.notion.site/Grav-XSS-25-04-21-1dcaf8998a078001a2eff3dc47974d6d?pvs=4
• https://tyojong.tistory.com/2

Get alerted when CVE-2025-46199 or the next vulnerability affects your stack