Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Grav\-Plugin\-Admin
(Getgrav)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 3 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2021-04-07 | CVE-2021-21425 | Grav Admin Plugin is an HTML user interface that provides a way to configure Grav and create and modify pages. In versions 1.10.7 and earlier, an unauthenticated user can execute some methods of administrator controller without needing any credentials. Particular method execution will result in arbitrary YAML file creation or content change of existing YAML files on the system. Successfully exploitation of that vulnerability results in configuration changes, such as general site information... | Grav\-Plugin\-Admin | 9.8 | ||
| 2021-11-19 | CVE-2021-3920 | grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Grav\-Plugin\-Admin | 5.4 | ||
| 2021-09-27 | CVE-2021-3799 | grav-plugin-admin is vulnerable to Improper Restriction of Rendered UI Layers or Frames | Grav\-Plugin\-Admin | 5.4 |