~ / search / GHSA-93pf-mrc8-4g3h

GHSA-93pf-mrc8-4g3h

Konga is vulnerable to Cross Site Scripting (XSS) attacks

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-34243

Packages

EcosystemPackageAffectedFixed in
npm kongadmin <= 0.14.9 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Konga v0.14.9 is vulnerable to Cross Site Scripting (XSS) via the username parameter.

References

External links from the advisory. They lead to third-party sites.