CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.6. Public exploit code or proof-of-concept references have been detected in its references.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
GitHub PoC Links
Note: these links are listed for security research and verification purposes only.
CVE
CVE-2026-29924
Severity
HIGH
CVSS
7.6
EPSS
0.34%
Original NVD Description
Grav CMS v1.7.x and before is vulnerable to XML External Entity (XXE) through the SVG file upload functionality in the admin panel and File Manager plugin.
Related CVEs
Other vulnerabilities affecting the same vendor(s)