skeletonsec

home research writeups projects about services

tag: Cms

2026-09-05 Grav stored XSS via assets sandbox allowlist (editor→super-admin) CVE-2026-86197

Everything here ships with evidence or it doesn't ship.

© 2026 skeletonsec · security@skeletonsec.com · rss · github · security.txt

26 CVEs (dbu.gs) GitHub: @skeletonsec