CVE-2025-66298 | grav up to 1.8.0-beta.27 special elements used in a template engine (GHSA-8535-hvm8-2hmv)

December 1, 2025 Yanac

A vulnerability classified as problematic has been found in grav up to 1.8.0-beta.27. Affected by this vulnerability is an unknown functionality. Performing manipulation results in improper neutralization of special elements used in a template engine.

This vulnerability is reported as CVE-2025-66298. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More