CVE-2025-46198

Publication date

2025-07-25 00:00:00

Family

mitre

State

PUBLISHED

Description

Cross Site Scripting vulnerability in grav v.1.7.48, v.1.7.47 and v.1.7.46 allows an attacker to execute arbitrary code via the onerror attribute of the img element