GR
Vendor
Grav
7
CVEs
0
On KEV
0
New 30D
Products
GR9.8
Grav
Grav
5 CVEs0 on KEV0 new
CM5.0
CMS
Grav
1 CVEs0 on KEV0 new
GR5.1
grav-plugin-api
Grav
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-58657 | GR Grav Grav | 4.8 | Jul 8 | Grav - Stored CSS Injection via Markdown Image resize() Action |
| CVE-2026-58654 | GR Grav Grav | 4.3 | Jul 8 | Grav - Arbitrary File Upload via Avatar Endpoint |
| CVE-2026-56700 | GR Grav Grav | 9.8 | Jun 30 | Grav - Multiple Remote Code Execution Vulnerabilities via Unsafe Unserialize and Command Injection |
| CVE-2020-37256 | GR Grav Grav | 5.4 | Jun 25 | Grav - Cross-Site Scripting in Admin Plugin Page Editor |
| CVE-2026-56701 | GR Grav Grav | 6.5 | Jun 23 | Grav - XML External Entity Injection via SVG Upload |
| CVE-2026-11982 | GR grav-plugin-api Grav | 5.1 | Jun 18 | Stored XSS via missing XSS safety check in Admin2 Pages API partial validation |
| CVE-2026-7317 | CM CMS Grav | 5.0 | Apr 28 | Grav CMS Cache Value FileCache.php doGet deserialization |