Is CVE-2025-64059 being exploited?

No public exploit is currently tracked.

How severe is CVE-2025-64059?

CVE-2025-64059 has a CVSS v3 severity of LOW (1.8).

Back

CVE-2025-64059

Description

Grav 1.7.50.2 allows admins to enter JavaScript via the Home Page editor. NOTE: the relevance of this for stored XSS is disputed because admins are allowed to modify templates, install plugins, and upload other executable content.