GR
Product
grav-plugin-admin
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 9Low 0
Watch
Add grav-plugin-admin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-44737 | 6.2 | May 11 | grav-plugin-admin: Stored Cross-Site Scripting (XSS) Reflected endpoint /admin/pages/[page], parameter data[header][title] Affected: < 1.10.49.5 |
| CVE-2025-66309 | 6.1 | Dec 1 | This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages Affected: through 1.10.50 |
| CVE-2025-66312 | 5.4 | Dec 1 | This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages Affected: through 1.10.50 |
| CVE-2025-66311 | 5.4 | Dec 1 | This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages Affected: through 1.10.50 |
| CVE-2025-66310 | 5.4 | Dec 1 | This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages Affected: through 1.10.50 |
| CVE-2025-66308 | 5.4 | Dec 1 | This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages Affected: through 1.10.50 |
| CVE-2021-3920 | 5.4 | Nov 19 | grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affected: before 1.10.25 |
| CVE-2021-3799 | 5.4 | Sep 27 | grav-plugin-admin is vulnerable to Improper Restriction of Rendered UI Layers or Frames Affected: before 1.10.20 |
| CVE-2025-66307 | 5.3 | Dec 1 | This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages Affected: through 1.10.50 |
Showing 9