Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 08:57:35 +0000 CVE-2026-75831 — Grav before 2.0.15 Stored XSS via audio/video source URL https://vulnerability.circl.lu/vuln/cve-2026-75831 <p><strong>Affected:</strong> getgrav grav</p> <p>Grav before 2.0.15 contains a stored cross-site scripting vulnerability in the audio and video media rendering through the sourceParsedownElement method. The media URL fragment is concatenated unescaped into rawHtml source elements, allowing attackers to inject arbitrary HTML and JavaScript that executes in viewers&#39; sessions.</p> <p><strong>Affected:</strong> getgrav grav</p> <p>Grav before 2.0.15 contains a stored cross-site scripting vulnerability in the audio and video media rendering through the sourceParsedownElement method. The media URL fragment is concatenated unescaped into rawHtml source elements, allowing attackers to inject arbitrary HTML and JavaScript that executes in viewers&#39; sessions.</p> https://vulnerability.circl.lu/vuln/cve-2026-75831