Medium · 4.8 CVE-2024-54775 EUVD-2024-3548GHSA-37x3-j9jq-vrjx

Dcat-Admin Cross-Site Scripting (XSS) vulnerability

Published Dec 27, 2024 · Updated Dec 28, 2024 · Assigned by mitre

Description

Dcat-Admin v2.2.0-beta and v2.2.2-beta contains a Cross-Site Scripting (XSS) vulnerability via /admin/auth/menu and /admin/auth/extensions.

Ecosystem	Package	Affected	Fixed	Record
Packagist	dcat/laravel-admin	2.2.0-beta	—	GHSA-37x3-j9jq-vrjx
Packagist	dcat/laravel-admin	2.2.2-beta	—	GHSA-37x3-j9jq-vrjx