Description
Konga v0.14.9 is vulnerable to Cross Site Scripting (XSS) via the username parameter.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | kongadmin | <= 0.14.9 | — | GHSA-93pf-mrc8-4g3h |
Medium · 5.4
CVE-2024-34243
EUVD-2024-1536GHSA-93pf-mrc8-4g3h
Konga is vulnerable to Cross Site Scripting (XSS) attacks
Published May 14, 2024 · Updated Mar 28, 2025 · Assigned by mitre