getgrav grav-plugin-admin güvenlik açıkları (CVE)

getgrav grav-plugin-admin için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

11 sonuç
5.4Orta
CVE-2020-37256

Grav - Cross-Site Scripting in Admin Plugin Page Editor

Grav Grav

Grav before 1.6.30 contains a cross-site scripting vulnerability in the Admin plugin page editor default security configuration. Privileged users with page editing capabilities can inject malicious scripts to execute arbitrary code and install malicious plugi…

6.5Orta
CVE-2026-56701

Grav - XML External Entity Injection via SVG Upload

Grav Grav

Grav before 2.0.0-beta.2 contains an XML external entity injection vulnerability in SVG file upload processing that allows authenticated attackers to read arbitrary files. The application uses simplexml_load_string without disabling external entity loading, e…