CVE record · 1 source
CVE-2026-112780
CVSS 8.8Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbitrary public static methods by renaming…
- CVSS
- 8.8
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbitrary public static methods by renaming…
Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbitrary public static methods by renaming Flex form fields with replace-name@. Attackers with page-edit permission can…