CVE-2026-75831

Published: Aug 18, 2026Modified: Sep 8, 2026Deferred

5.1

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: disclosure@vulncheck.com (Secondary)

Description

Grav before 2.0.15 contains a stored cross-site scripting vulnerability in the audio and video media rendering through the sourceParsedownElement method. The media URL fragment is concatenated unescaped into rawHtml source elements, allowing attackers to inject arbitrary HTML and JavaScript that executes in viewers' sessions.

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (4)

https://github.com/getgrav/grav/commit/aba291a59cab29ddce491175791888d8d0b65e20

Source: disclosure@vulncheck.com

https://github.com/getgrav/grav/security/advisories/GHSA-6qw9-4vv5-jr97

Source: disclosure@vulncheck.com

https://www.vulncheck.com/advisories/grav-before-stored-xss-via-audio-video-source-url

Source: disclosure@vulncheck.com

https://github.com/getgrav/grav/security/advisories/GHSA-6qw9-4vv5-jr97

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.