~ / search / GHSA-jfvf-rfmq-qwf8

GHSA-jfvf-rfmq-qwf8

Croos-site scripting in Croogo

Source: GitHub Advisory Database (reviewed) Low CVE-2019-20789

Packages

EcosystemPackageAffectedFixed in
Packagist croogo/croogo < 3.0.7 3.0.7

Details

As written in the advisory (Markdown source, shown as plain text).

Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies.

References

External links from the advisory. They lead to third-party sites.