CVE Intelligence

Grav Grav-plugin-api vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Grav Grav-plugin-api: 1 record(s), with affected versions and fixes.

CVE-2026-11982 Medium · 5.1 CWE-79 Jun 18, 2026
Stored XSS via missing XSS safety check in Admin2 Pages API partial validation
Grav 2.0.0-rc.9 with Admin2 2.0.0-rc.14 contains a stored cross-site scripting (XSS) vulnerability in the Admin2 Pages API save flow.