Description
Grav CMS v1.7.x and before is vulnerable to XML External Entity (XXE) through the SVG file upload functionality in the admin panel and File Manager plugin.
High · 7.6
CVE-2026-29924
EUVD-2026-17148
Grav CMS v1.7.x and before is vulnerable to XML External Entity (XXE) through the SVG file upload functionality in the admin panel and File…
Published Mar 30, 2026 · Updated Mar 30, 2026 · Assigned by mitre