Approved changes feed: RSS · Atom

cpe:2.3:a:getgrav:grav:1.7.45:*:*:*:*:*:*:*

part: a version: 1.7.45 update: *

VendorGetgrav (a335dd59-994b-520f-884a-04ce57f966e0)
ProductGrav (c293700e-33e0-573c-a00f-7d887eccd93d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/getgrav/grav purl2cpe 2026-06-01 10:15:21.350048
pkg:sourceforge/grav.mirror purl2cpe 2026-06-01 10:15:21.350049

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-35498 vulnerable 2026-06-08 06:39:42.025585 Details available
A cross-site scripting (XSS) vulnerability in Grav v1.7.45 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Published: 2025-01-06T00:00:00.000Z
Updated: 2025-01-07T15:43:09.166Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.