Beveiligingsadvies

CVE-2026-85599

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-04 11:30:02

Laatst bijgewerkt 2026-09-08 16:24:58

Toegewezen door VulnCheck

CVSS-score 7.2

Status PUBLISHED

Beschrijving

Grav Shortcode Core before 6.2.5 contains stored cross-site scripting vulnerabilities in the [lorem] tag parameter and [details] summary parameter that are written to rendered pages without escaping. Attackers with page-edit access can inject arbitrary HTML and JavaScript that executes in the browsers of all page visitors, including administrators.

← Alle CVE's bekijken Bekijk op cve.org ↗