Known Vulnerabilities for Grav-plugin-admin by Getgrav
Listed below are 3 of the newest known vulnerabilities associated with "Grav-plugin-admin" by "Getgrav".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-29924 json | Grav CMS v1.7.x and before is vulnerable to XML External Entity (XXE) through the SVG file upload functionality in the admin ... | Not Provided | 2026-03-30 | 2026-03-30 |
| CVE-2021-21425 json | Grav Admin Plugin is an HTML user interface that provides a way to configure Grav and create and modify pages. In versions 1.... | 9.8 - CRITICAL | 2021-04-07 | 2022-10-24 |
| CVE-2021-3920 json | grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 5.4 - MEDIUM | 2021-11-19 | 2021-11-23 |
| CVE-2021-3799 json | grav-plugin-admin is vulnerable to Improper Restriction of Rendered UI Layers or Frames | 5.4 - MEDIUM | 2021-09-27 | 2021-09-30 |