CVE-2026-85600 | GetGrav up to 2.0.20 Admin tHtml Username cross site scripting

September 4, 2026 Yanac

A vulnerability labeled as problematic has been found in GetGrav Grav up to 2.0.20. Affected by this vulnerability is the function tHtml of the component Admin. The manipulation of the argument Username results in cross site scripting.

This vulnerability is reported as CVE-2026-85600. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More