Skip to content
OpenAdvisories

Product · Grav

grav-plugin-api

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2026-11982

    Stored XSS via missing XSS safety check in Admin2 Pages API partial validation

    Grav 2.0.0-rc.9 with Admin2 2.0.0-rc.14 contains a stored cross-site scripting (XSS) vulnerability in the Admin2 Pages API save flow.

    Grav grav-plugin-api