VULNERABILITY INTELLIGENCE

CVE-2026-11982

EPSS probability0.38%
CISA KEVNot currently listed
Published2026-06-18
Last modified2026-10-26

Description

Grav 2.0.0-rc.9 with Admin2 2.0.0-rc.14 contains a stored cross-site scripting (XSS) vulnerability in the Admin2 Pages API save flow.

Weakness classification

  • help@fluidattacks.com: CWE-79

Primary references