Vulnerability in Getgrav Grav-plugin-form

CVE-2026-42845

The form plugin for Grav adds the ability to create and use forms. Prior to 9.1.0 , there is an unauthenticated page-content overwrite via file upload (GHSA-w4rc-p66m-x6qq). Public form uploads now strip path components from the POST-suppl…

EPSS: 0.000 (4.8th percentile) — read the EPSS interpretation.