Unrated

Grav CMS v1.7.x and before is vulnerable to XML External Entity (XXE) through the SVG file upload functionality in the admin panel and File Manager pl...

CVE-2026-29924 First seen on SecPulse Mar 30, 09:00

Original description The description as published by the source.

Grav CMS v1.7.x and before is vulnerable to XML External Entity (XXE) through the SVG file upload functionality in the admin panel and File Manager plugin.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
package github.com

Key facts

Severity: Unrated
Published: Mar 30, 2026
First seen on SecPulse: Mar 30, 09:00

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:11