← Database

CVE-2025-46198

HIGH CVSS: 8.8 Published: 2025-07-25 Modified: 2026-06-17

Description

Cross Site Scripting vulnerability in grav v.1.7.48, v.1.7.47 and v.1.7.46 allows an attacker to execute arbitrary code via the onerror attribute of the img element

Affected Platforms

Getgrav Grav

Weakness Type

CWE-79

References