{"id":"CVE-2026-85599","title":"Grav Shortcode Core before 6.2.5 contains stored cross-site scripting vulnerabilities in the [lorem] tag parameter and [details] summary parameter that are written to rendered pages without escaping","summary":"Grav Shortcode Core before 6.2.5 contains stored cross-site scripting vulnerabilities in the [lorem] tag parameter and [details] summary parameter that are written to rendered pages without escaping. Attackers with page-edit access can i…","severity":"high","cvss":7.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"vendor":"getgrav","product":"grav-plugin-shortcode-core","affected":["grav-plugin-shortcode-core < 6.2.5"],"published":"2026-09-04","updated":"2026-09-08","sourceUpdated":"2026-09-08T20:05:53.177","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-85599","references":[{"url":"https://github.com/getgrav/grav/security/advisories/GHSA-hvm8-wx3f-j774","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/grav-shortcode-core-before-6.2.5-stored-xss-via-unescaped-parameters","label":"disclosure@vulncheck.com"},{"url":"https://github.com/getgrav/grav/security/advisories/GHSA-hvm8-wx3f-j774","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-08T16:22:41.140701Z"},"epss":0.00158,"epssPercentile":0.05321,"ingestedAt":"2026-09-06T01:47:58.151Z","slug":"CVE-2026-85599","body":"## Overview\n\nGrav Shortcode Core before 6.2.5 contains stored cross-site scripting vulnerabilities in the [lorem] tag parameter and [details] summary parameter that are written to rendered pages without escaping. Attackers with page-edit access can inject arbitrary HTML and JavaScript that executes in the browsers of all page visitors, including administrators.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":52,"depthScoreParts":{"impact":39.6,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[{"seq":8301,"id":"CVE-2026-85599","ts":1788919996856,"field":"exploit_available","old":"false","new":"true"},{"seq":8110,"id":"CVE-2026-85599","ts":1788919284418,"field":"exploit_available","old":"true","new":"false"},{"seq":7919,"id":"CVE-2026-85599","ts":1788916358128,"field":"exploit_available","old":"false","new":"true"},{"seq":7728,"id":"CVE-2026-85599","ts":1788915301654,"field":"exploit_available","old":"true","new":"false"},{"seq":7537,"id":"CVE-2026-85599","ts":1788912718608,"field":"exploit_available","old":"false","new":"true"},{"seq":7346,"id":"CVE-2026-85599","ts":1788911334479,"field":"exploit_available","old":"true","new":"false"},{"seq":7150,"id":"CVE-2026-85599","ts":1788909080166,"field":"exploit_available","old":"false","new":"true"},{"seq":6962,"id":"CVE-2026-85599","ts":1788907392297,"field":"exploit_available","old":"true","new":"false"},{"seq":6764,"id":"CVE-2026-85599","ts":1788905446026,"field":"exploit_available","old":"false","new":"true"},{"seq":6582,"id":"CVE-2026-85599","ts":1788903460431,"field":"exploit_available","old":"true","new":"false"},{"seq":6368,"id":"CVE-2026-85599","ts":1788901812116,"field":"exploit_available","old":"false","new":"true"},{"seq":6198,"id":"CVE-2026-85599","ts":1788899562699,"field":"exploit_available","old":"true","new":"false"},{"seq":5961,"id":"CVE-2026-85599","ts":1788898181046,"field":"exploit_available","old":"false","new":"true"},{"seq":5850,"id":"CVE-2026-85599","ts":1788895711443,"field":"exploit_available","old":"true","new":"false"},{"seq":5682,"id":"CVE-2026-85599","ts":1788894534634,"field":"exploit_available","old":"false","new":"true"},{"seq":5640,"id":"CVE-2026-85599","ts":1788891871665,"field":"exploit_available","old":"true","new":"false"},{"seq":5573,"id":"CVE-2026-85599","ts":1788888673337,"field":"exploit_available","old":"false","new":"true"},{"seq":5564,"id":"CVE-2026-85599","ts":1788888071764,"field":"exploit_available","old":"true","new":"false"},{"seq":5498,"id":"CVE-2026-85599","ts":1788887296704,"field":"exploit_available","old":"false","new":"true"}]}