Lucene search

K
osvGoogleOSV:GHSA-WR5C-4F2H-28M6
HistoryMay 14, 2022 - 1:38 a.m.

Croogo vulnerable to XSS in title field

2022-05-1401:38:22
Google
osv.dev
4
croogo
xss
vulnerability
html
javascript
title field

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

24.8%

A stored self-XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/menus/menus/edit/3.

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

24.8%

Related for OSV:GHSA-WR5C-4F2H-28M6