Vulnerabilities in Grav

4 results

CVE-2026-11982MEDIUMStored XSS via missing XSS safety check in Admin2 Pages API partial validationEPSS 0.3%CVE-2026-56701HIGHGrav - XML External Entity Injection via SVG UploadEPSS 0.2%CVE-2026-7317LOWGrav CMS Cache Value FileCache.php doGet deserializationEPSS 0.2%CVE-2020-37256MEDIUMGrav - Cross-Site Scripting in Admin Plugin Page EditorEPSS —