Lucene search
GoogleOSV:GHSA-V6Q8-8WGX-8HM7HistoryMay 14, 2022 - 1:38 a.m.
Croogo vulnerable to XSS in title field
2022-05-1401:38:22
Google
osv.dev
6
croogo
stored xss
html
javascript
title field
admin
blocks
EPSS
0.001
Percentile
24.8%
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/blocks/blocks/edit/8.
Related
osv
osv
CVE-2019-7171
2019-01-29 18:29:00
github
github
Croogo vulnerable to XSS in title field
2022-05-14 01:38:22
veracode
veracode
Cross-site Scripting (XSS)
2019-01-30 01:31:41
cvelist
cvelist
CVE-2019-7171
2019-01-29 18:00:00
prion
prion
Cross site scripting
2019-01-29 18:29:00
nvd
nvd
CVE-2019-7171
2019-01-29 18:29:00
cve
cve
CVE-2019-7171
2019-01-29 18:29:00