grav.

Grav < 1.0.0-rc.16 Authentication Bypass via token URL Parameter

• grav
• CWE-598

grav-plugin-login < 3.8.11 CSRF via regenerate2FASecret

• grav
• Cross-site request forgery (CSRF)

Grav Flex-Objects < 1.4.3 Authorization Bypass via API

• grav
• Broken access control
• CWE-636

Grav < 2.0.4 SSRF via Unrestricted cURL Protocols

• grav
• Server-side request forgery (SSRF)

grav-plugin-api < 1.0.6 Privilege Escalation via createApiKey

• grav
• Broken access control

Grav < 1.0.6 API Key Scope Bypass via ApiKeyAuthenticator

• grav
• Broken access control

Grav before 9.1.8 Arbitrary File Write via Twig-Processed Filename

• grav
• Path traversal

Grav before 1.0.3 Remote Code Execution via File Upload Extension Bypass

• grav
• Unrestricted file upload

Grav before 2.0.4 Improper Session Invalidation JWT Access Tokens

• grav
• Authentication bypass

Grav Flex Objects - Server-Side Template Injection via Dynamic Titles

• grav
• Code injection

Grav before 2.0.4 Information Disclosure via __GRAV_CONFIG__

• grav
• Information disclosure

Grav Admin Plugin — IDOR Privilege Escalation via saveUser()

• grav
• Broken access control

grav-plugin-database: DSN Parameter Injection via Unsanitized Configuration Values in Connection String Construction

• grav
• Other injection

grav-plugin-database: SQL Injection in PDO::tableExists() due to Unsanitized Table Name Interpolation

• grav
• SQL injection

Grav before 1.0.3 Stored XSS via SVG Upload API

• grav
• Cross-site scripting (XSS)

Grav API Plugin - Cross-Origin Admin Account Takeover via CORS Wildcard and JWT Query Parameter

• grav
• CWE-598

Grav - Arbitrary File Upload via Avatar Endpoint

• Grav
• Unrestricted file upload

Grav vulnerable to Self Cross Site Scripting in /forgot_password

• grav
• Cross-site scripting (XSS)