Advisories · Technology

getgrav grav-plugin-guestbook.

Every CVE that names getgrav grav-plugin-guestbook among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-109322 CVE record

CVSS 5.3 Medium

Grav Guestbook before 0.5.2 Stored XSS via AJAX Pagination and Admin Views
- getgrav grav-plugin-guestbook
- Cross-site scripting (XSS)
Not analysed yet 12 Oct 2026
CVE-2026-109319 CVE record

CVSS 5.3 Medium

Grav Guestbook Plugin 0.5.0 and 0.5.1 Missing Authorization and CSRF in Moderation
- getgrav grav-plugin-guestbook
- Broken access control
Not analysed yet 12 Oct 2026