Grav 2.0.0-rc.9 with Admin2 2.0.0-rc.14 contains a stored cross-site scripting (XSS) vulnerability in the Admin2 Pages API save flow.
Grav 2.0.0-rc.9 with Admin2 2.0.0-rc.14 contains a stored cross-site scripting (XSS) vulnerability in the Admin2 Pages API save flow.
Why this VPI (explainable, experimental)
VPI breakdown
| Impact | 51.00 |
| Exploitation signal(No additional exploitation signal) | ×1.00 |
| VPI | 51.00 |
VPI formula vpi-v1