Croos-site scripting in Croogo

2021-06-2215:23:21

Google

osv.dev

0.001 Low

EPSS

Percentile

21.6%

JSON

Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies.

CPENameOperatorVersion
croogo/croogoeq3.0.4
croogo/croogoeq3.0.0-alpha.1
croogo/croogoeq2.0.0
croogo/croogoeq2.3.3
croogo/croogoeq3.0.0-alpha.2
croogo/croogoeq3.0.6
croogo/croogoeq2.3.2
croogo/croogoeq2.2.4
croogo/croogoeq2.2.0
croogo/croogoeq2.2.2

Name	Operator	Version
croogo/croogo	eq	3.0.4
croogo/croogo	eq	3.0.0-alpha.1
croogo/croogo	eq	2.0.0
croogo/croogo	eq	2.3.3
croogo/croogo	eq	3.0.0-alpha.2
croogo/croogo	eq	3.0.6
croogo/croogo	eq	2.3.2
croogo/croogo	eq	2.2.4
croogo/croogo	eq	2.2.0
croogo/croogo	eq	2.2.2