Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 17:08:12 +0000 CVE-2026-109323 — Grav Star Ratings 2.0.1 through 2.0.3 Missing Server-Side vote_access Authorization https://db.gcve.eu/vuln/cve-2026-109323 <p><strong>Affected:</strong> getgrav grav-plugin-star-ratings</p> <p>Grav Star Ratings 2.0.1 through 2.0.3 contains a missing authorization vulnerability that allows unauthenticated visitors to vote by bypassing client-only vote_access and readonly enforcement. Attackers can use the anonymous nonce emitted by getData() to submit votes directly to addVote(), manipulating restricted or disabled ratings and aggregate rating output.</p> <p><strong>Affected:</strong> getgrav grav-plugin-star-ratings</p> <p>Grav Star Ratings 2.0.1 through 2.0.3 contains a missing authorization vulnerability that allows unauthenticated visitors to vote by bypassing client-only vote_access and readonly enforcement. Attackers can use the anonymous nonce emitted by getData() to submit votes directly to addVote(), manipulating restricted or disabled ratings and aggregate rating output.</p> https://db.gcve.eu/vuln/cve-2026-109323