Shrubberyrubbery

**Name of the Vulnerable Software and Affected Versions** Grav versions prior to 1.6.30 **Description** A cross-site scripting issue exists in the default security configuration of the Admin plugin page editor. Privileged users with page editing capabilities can inject malicious scripts to execute arbitrary code and install malicious plugins to gain system access. **Recommendations** Update to version 1.6.30 or later.