Getgrav grav-plugin-admin

• CVE-2026-44737 Medium 6.2 grav-plugin-admin: Stored Cross-Site Scripting (XSS) Reflected endpoint /admin/pages/[page], parameter data[header][title] 0.3%
• CVE-2021-29439 High 7.2 Plugins can be installed with minimal admin privileges 2.6%
• CVE-2021-21425 Critical 9.3 Unauthenticated Arbitrary YAML Write/Update leads to Code Execution 80.6%