CVE-2025-65186

Grav CMS 1.7.49 is vulnerable to Cross Site Scripting (XSS). The page editor allows authenticated users to edit page content via a Markdown editor. The editor fails to properly sanitize <script> tags, allowing stored XSS payloads to execute when pages are viewed in the admin interface.

• CWE-79
• CWE-79

• https://github.com/getgrav/gravProduct
• https://github.com/lukehebe/Vulnerability-Disclosures/blob/main/CVE-2025-65186.pdfExploit, Third Party Advisory

Published

Dec 2, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-6515The MCP SSE endpoint in oatpp-mcp returns an instance pointe…6.8
• CVE-2025-6516A vulnerability has been found in HDF5 up to 1.14.6 and clas…7.8
• CVE-2025-6517A vulnerability was found in Dromara MaxKey up to 4.1.7 and …9.8
• CVE-2025-65176An issue was discovered in Dynatrace OneAgent before 1.325.4…7.5
• CVE-2025-6518A vulnerability was found in PySpur-Dev pyspur up to 0.1.18.…6.3
• CVE-2025-65185There is a username enumeration via local user login in Entr…2.8
• CVE-2025-65187A Stored Cross Site Scripting vulnerability exists in CiviCR…6.1
• CVE-2025-6519E3 Site Supervisor (firmware version < 2.31F01) has a defaul…9.8
• CVE-2025-65199A command injection vulnerability exists in Windscribe for L…7.8
• CVE-2025-6520Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2025-65202TRENDnet TEW-657BRM 1.00.1 has an authenticated remote OS co…8
• CVE-2025-65203KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill …7.1