Description
Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | croogo/croogo | < 3.0.7 | 3.0.7 | GHSA-jfvf-rfmq-qwf8 |
Medium · 4.8
CVE-2019-20789
EUVD-2021-1342GHSA-jfvf-rfmq-qwf8
Croos-site scripting in Croogo
Published Apr 26, 2020 · Updated Aug 5, 2024 · Assigned by mitre