Getgrav Grav

• CVE-2023-37897 High 7.2 Server-side Template Injection (SSTI) in grav 2.8%
• CVE-2023-34452 Medium 5.4 Grav vulnerable to Self Cross Site Scripting in /forgot_password 0.6%
• CVE-2023-34448 High 8.8 Grav Server-side Template Injection (SSTI) via Twig Default Filters 4.5%
• CVE-2023-34253 High 8.8 Grav vulnerable to Server-side Template Injection (SSTI) via Denylist Bypass 2.1%
• CVE-2023-34252 High 8.8 Grav Server-side Template Injection via Insufficient Validation in filterFilter 2.1%
• CVE-2023-34251 Critical 10.0 Grav Server Side Template Injection vulnerability 2.3%
• CVE-2021-29440 High 8.4 Twig allowing dangerous PHP functions by default 29.9%