Login Request a demo
GR
Product
grav-plugin-admin
by getgrav · last CVE May 11, 2026
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 1High 0Medium 9Low 0
Severity
All severities10Critical1High0Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add grav-plugin-admin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-21425
9.8
81%
Apr 7
Grav Admin Plugin is an HTML user interface that provides a way to configure Grav and create and modify pages
Affected: before 1.10.8
CVE-2026-44737
6.2
0%
May 11
grav-plugin-admin: Stored Cross-Site Scripting (XSS) Reflected endpoint /admin/pages/[page], parameter data[header][title]
Affected: < 1.10.49.5
CVE-2025-66309
6.1
0%
Dec 1
This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages
Affected: through 1.10.50
CVE-2025-66312
5.4
0%
Dec 1
This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages
Affected: through 1.10.50
CVE-2025-66311
5.4
0%
Dec 1
This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages
Affected: through 1.10.50
CVE-2025-66310
5.4
0%
Dec 1
This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages
Affected: through 1.10.50
CVE-2025-66308
5.4
0%
Dec 1
This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages
Affected: through 1.10.50
CVE-2021-3920
5.4
1%
Nov 19
grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected: before 1.10.25
CVE-2021-3799
5.4
2%
Sep 27
grav-plugin-admin is vulnerable to Improper Restriction of Rendered UI Layers or Frames
Affected: before 1.10.20
CVE-2025-66307
5.3
0%
Dec 1
This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages
Affected: through 1.10.50
Showing 10