CVE-2025-66294 | grav up to 1.8.0-beta.27 cleanDangerousTwig code injection (GHSA-662m-56v4-3r8f)

A vulnerability was found in grav up to 1.8.0-beta.27. It has been rated as critical. This affects the function cleanDangerousTwig. This manipulation causes code injection.

This vulnerability is tracked as CVE-2025-66294. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More