VULNERABILITY INTELLIGENCE

CVE-2019-16126

CVSS score6.1 MEDIUM

EPSS probability1.54%

CISA KEVNot currently listed

Published2019-09-09

Last modified2026-06-17

Description

Grav through 1.6.15 allows (Stored) Cross-Site Scripting due to JavaScript execution in SVG images.