CVE-2025-64059

The vulnerability affects Grav 1.7.50.2, allowing administrators to input JavaScript through the Home Page editor, which could potentially lead to stored cross-site scripting (XSS) issues. However, the actual risk is considered low due to the administrative privileges that allow for template modifications and plugin installations, which can mitigate the impact. Organizations using this version of Grav should prioritize monitoring and securing their admin interfaces to prevent misuse of this capability.