{"metadata": {"vulnerability": "CVE-2026-75831", "count": 18, "kinds": {"milestone": 5, "sighting": 2, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-08-03T00:00:00Z", "date_only": false, "value": "2026-08-03T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-75831", "field": "containers.cna.datePublic"}, {"timestamp": "2026-08-18T10:57:39.580Z", "date_only": false, "value": "2026-08-18T10:57:39.580Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-75831", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-18T11:19:43.062Z", "date_only": false, "value": "2026-08-18T11:19:43.062Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-75831", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-18T12:19:33Z", "date_only": false, "value": "2026-08-18T12:19:33Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q8CG-5M48-5C25", "record": "GHSA-Q8CG-5M48-5C25", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-18T12:19:33.100Z", "date_only": false, "value": "2026-08-18T12:19:33.100", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-75831", "record": "FKIE_CVE-2026-75831", "field": "published"}, {"timestamp": "2026-08-18T12:31:22Z", "date_only": false, "value": "2026-08-18T12:31:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q8CG-5M48-5C25", "record": "GHSA-Q8CG-5M48-5C25", "field": "published"}, {"timestamp": "2026-08-18T13:55:23.651Z", "date_only": false, "value": "2026-08-18T13:55:23.651515Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-75831", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-18T13:55:23.651Z", "date_only": false, "value": "2026-08-18T13:55:23.651515Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-75831", "record": "FKIE_CVE-2026-75831", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-18T13:55:32.341Z", "date_only": false, "value": "2026-08-18T13:55:32.341Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-75831", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-17T17:31:29Z", "date_only": false, "value": "2026-09-17T17:31:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q8CG-5M48-5C25", "record": "GHSA-Q8CG-5M48-5C25", "field": "modified"}, {"timestamp": "2026-09-17T17:31:29Z", "date_only": false, "value": "2026-09-17T17:31:29Z", "kind": "other", "label": "Withdrawn", "source": "github \u00b7 GHSA-Q8CG-5M48-5C25", "record": "GHSA-Q8CG-5M48-5C25", "field": "withdrawn"}, {"timestamp": "2026-09-17T17:31:41Z", "date_only": false, "value": "2026-09-17T17:31:41Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6QW9-4VV5-JR97", "record": "GHSA-6QW9-4VV5-JR97", "field": "published"}, {"timestamp": "2026-09-17T17:32:10Z", "date_only": false, "value": "2026-09-17T17:32:10Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6QW9-4VV5-JR97", "record": "GHSA-6QW9-4VV5-JR97", "field": "modified"}, {"timestamp": "2026-09-17T18:31:18.941Z", "date_only": false, "value": "2026-09-17T18:31:18.941366Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/0c813f94f8f4231594aa209e75f9f7b9", "record": "CVE-2026-75831", "field": "creation_timestamp", "uuid": "7be9d4f7-5884-4477-9964-82223448f99b", "content": "# CVE-2026-75831: CVE-2026-75831: Stored Cross-Site Scripting in Grav CMS Audio/Video Media Rendering\n\n> **CVSS Score:** 7.6\n> **Published:** 2026-09-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-75831\n\n## Summary\nImproper neutralization of input during web page generation in Grav CMS allows authenticated users with page modification privileges to execute stored Cross-Site Scripting (XSS) attacks. The flaw exists in AudioMediaTrait and VideoMediaTrait where media source URLs are concatenated directly into HTML templates without proper escaping.\n\n## TL;DR\nA stored Cross-Site Scripting vulnerability in Grav CMS versions prior to 2.0.15 allows authenticated editors to insert arbitrary JavaScript via malicious audio/video file paths, which executes in the context of any user (including administrators) viewing the page.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-79\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 7.6 (High)\n- **EPSS Score**: 0.00313 (0.31%)\n- **Impact**: Stored Cross-Site Scripting (XSS)\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Grav CMS\n- **Grav**: < 2.0.15 (Fixed in: `2.0.15`)\n\n## Mitigation\n\n- Upgrade Grav CMS core to version 2.0.15 or later.\n- Deploy a robust Content Security Policy (CSP) to block unauthenticated inline scripts.\n- Utilize WAF rules to detect and drop payloads containing attribute breakout characters in markdown submissions.\n\n**Remediation Steps:**\n1. Navigate to the Grav Admin Panel.\n2. Select the update notification or run 'bin/gpm self-upgrade' via the command line interface.\n3. Verify that 'AudioMediaTrait.php' and 'VideoMediaTrait.php' contain the htmlspecialchars wrapping for the $location variable.\n4. Clear the Grav cache by executing 'bin/grav clear-cache'.\n\n## References\n\n- [GHSA-6qw9-4vv5-jr97: Stored XSS in Grav CMS Audio/Video Media Rendering](https://github.com/getgrav/grav/security/advisories/GHSA-6qw9-4vv5-jr97)\n- [Grav Fix Commit](https://github.com/getgrav/grav/commit/d5f89d95d94cc155bc3be998ee85527a7be073dd)\n- [VulnCheck Advisory for CVE-2026-75831](https://www.vulncheck.com/advisories/grav-before-stored-xss-via-audio-video-source-url)\n- [NVD - CVE-2026-75831](https://nvd.nist.gov/vuln/detail/CVE-2026-75831)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-75831) - Automated Vulnerability Intelligence*", "url": "https://gist.github.com/alon710/0c813f94f8f4231594aa209e75f9f7b9"}, {"timestamp": "2026-09-17T18:35:02.410Z", "date_only": false, "value": "2026-09-17T18:35:02.410000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/advisories/GHSA-6qw9-4vv5-jr97", "record": "CVE-2026-75831", "field": "creation_timestamp", "uuid": "00604536-ab80-4174-8e5a-42eebf26c838", "url": "https://github.com/advisories/GHSA-6qw9-4vv5-jr97"}, {"timestamp": "2026-10-08T15:24:57.117Z", "date_only": false, "value": "2026-10-08T15:24:57.117Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-75831", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-08T15:24:57.117Z", "date_only": false, "value": "2026-10-08T15:24:57.117Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-75831", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-08T16:17:40.923Z", "date_only": false, "value": "2026-10-08T16:17:40.923", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-75831", "record": "FKIE_CVE-2026-75831", "field": "lastModified"}]}