Cpe:2.3:a:getgrav:datamanager:1.0.1:*:*:*:*:*:*:*

An unauthenticated stored cross-site scripting vulnerability in the Grav Data Manager plugin allows attackers to execute malicious JavaScript in the context of an administrator's session.