网安资讯详情 - SecLens 情报雷达

CVE-2026-64628 | getgrav up to 6.2.1 shortcode-core attribute handlers cross site scripting

来源： vuldb · 发布时间 2026-07-21 20:25 (UTC+08:00) · 抓取时间 2026-07-21 21:01 (UTC+08:00)

原文链接

摘要

A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">problematic</a>, has been found in <a href="https://vuldb.com/product/getgrav:grav">getgrav grav up to 6.2.1</a>. Affected by this issue is some unknown functionality of the component <em>shortcode-core attribute handlers</em>. The manipulation leads to cross site scripting. This vulnerability is listed as <a href="https://vuldb.com/cve/CVE-2026-64628">CVE-2026-64628</a>. The attack may be initiated remotely. There is no available exploit.

标签

• CVE-2026-64628

扩展字段

{
  "raw_pub_date": "Tue, 21 Jul 2026 14:25:44 +0200"
}