CVE-2026-85601 | Getgrav Grav up to 2.0.19 MarkdownEditor/MarkdownModal marked.parse cross site scripting

September 4, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Getgrav Grav up to 2.0.19. Impacted is the function marked.parse of the component MarkdownEditor/MarkdownModal. The manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-85601. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More