grav-plugin-shortcode-core vulnerabilities

CVEs whose affected-version data names the grav-plugin-shortcode-core package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-85599High· 7.2PoC

2w ago

Grav Shortcode Core before 6.2.5 contains stored cross-site scripting vulnerabilities in the [lorem] tag parameter and [details] summary parameter that are written to rendered pages without escaping

Grav Shortcode Core before 6.2.5 contains stored cross-site scripting vulnerabilities in the [lorem] tag parameter and [details] summary parameter that are written to rendered pages without escaping. Attackers with page-edit access can i…

▾ Midnightgetgrav · grav-plugin-shortcode-coreEPSS 0.16%via NVD