Cross Site Scripting vulnerability in grav v1748 and before allows an attacker to execute

链接： https://github.com/advisories/GHSA-c22x-w4fr-9xmp

CVSS 评分： 9.8

参考链接：

• https://nvd.nist.gov/vuln/detail/CVE-2025-46199

• https://rapid-echo-f9c.notion.site/Grav-XSS-25-04-21-1dcaf8998a078001a2eff3dc47974d6d?pvs=4

• https://tyojong.tistory.com/2

• https://github.com/advisories/GHSA-c22x-w4fr-9xmp

描述：

Cross Site Scripting vulnerability in grav v.1.7.48 and before allows an attacker to execute arbitrary code via a crafted script to the form fields