I won the award of the best Arabic cybersecurity influencer for 2026!!!! Thank you 3
MyCyberNews

Search

Find merged stories by title or summary.

Vulnerabilities & Patches
Emerging1 src

CVE-2026-86197 - Grav before 2.0.20 Cross-Site Scripting via Assets Sandbox

CVE ID : CVE-2026-86197 Published : Sept. 5, 2026, 1:18 p. m. • 7 hours, 27 minutes ago Description : Grav before 2. 0. 20 contains a cross-site scripting vulnerability in the Twig sandbox policy that allowlists addJs and addCss methods on Grav\Common\Assets without proper output escaping. Page editors can inject arbitrary script by registering malicious assets or injecting attributes, which are rendered unescaped into document head tags and executed for all visitors including administrators. Severity: 5.1 • MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

·CVEFeed
Read →

You've reached the end of current stories for this search.