CERT24CVE-2026-114660 — Grav 2.0.0 before 2.2.5: Unauthorized Page Deletion via Flex Form DirectivesLoading data…
CERT24Threat Observatory
Period

CVE-2026-114660 — Grav 2.0.0 before 2.2.5: Unauthorized Page Deletion via Flex Form Directives

Grav versions 2.0.0 before 2.2.5 contain an access-control vulnerability that may allow a page author to use flex-*@ directives in page frontmatter to call arbitrary Flex object methods.

← Back to intelligence

CVE-2026-114660 — Grav 2.0.0 before 2.2.5: Unauthorized Page Deletion via Flex Form Directives

Grav versions 2.0.0 before 2.2.5 contain an access-control vulnerability that may allow a page author to use flex-*@ directives in page frontmatter to call arbitrary Flex object methods.