Description (CNA)
Grav Admin before 2.0.20 fails to sanitize output from marked.parse() before injecting it into the DOM via Svelte's {@html} directive in MarkdownEditor and MarkdownModal components. Attackers can inject javascript: URI schemes in plugin or theme changelogs to execute arbitrary code in authenticated admin sessions without requiring site access.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| getgrav / grav | affected 0 before 2.0.20; unaffected 2.0.20 |
CWE
CWE-79
References
- https://github.com/getgrav/grav/security/advisories/GHSA-752r-88j4-vxm3
- https://www.vulncheck.com/advisories/grav-admin-before-2.0.20-cross-site-scripting-via-marked-js
ADP enrichment
No English description supplied.
No references supplied.