← All advisories

Medium severityNVD Advisory· Published Jun 18, 2026· Updated Jun 22, 2026

CVE-2026-11982

CVE-2026-11982

Description

Grav 2.0.0-rc.9 with Admin2 2.0.0-rc.14 contains a stored cross-site scripting (XSS) vulnerability in the Admin2 Pages API save flow.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Grav CMS/API Pluginllm-fuzzy
Range: 2.0.0-rc.14
Grav CMS/Gravllm-fuzzy
Range: 2.0.0-rc.9
Getgrav/Grav Plugin Admininferred
Range: =2.0.0-rc.14

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.