CVE-2026-29924 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Grav CMS v1.7.x and before is vulnerable to XML External Entity (XXE) through the SVG file upload functionality in the admin panel and File Manager plugin.
High CVSS: 7.6

CVE-2026-29924

Grav CMS v1.7.x and before is vulnerable to XML External Entity (XXE) through the SVG file upload functionality in the admin panel and File Manager plugin.
Vendor
Getgrav
Product
Grav
CWE
CWE-611
Yayın Tarihi
2026-03-30 19:16:24
Güncelleme
2026-04-06 15:58:27
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-611 Grav HIGH Getgrav 2026

Referanslar

https://github.com/getgrav/grav