CVE-2019-20789

Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies...

CVE-2019-20789: Improper Neutralization of Input During Web Page Generation

Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies...

PT-2020-10762

Name of the Vulnerable Software and Affected Versions Croogo versions prior to 3.0.7 Description The issue allows for XSS attacks via the title to "admin/menus/menus" or "admin/taxonomy/vocabularies". Recommendations For versions prior to 3.0.7, update to version 3.0.7 or later to resolve the...

Croogo cross-site scripting vulnerability (CNVD-2019-03590)

Croogo is a content management system CMS based on the CakePHP framework development . The system provides content type can be customized for Blog, Node, Page, content editing using WYSIWYG editor and other features. A cross-site scripting vulnerability exists in Croogo 3.0.5 and earlier versions...

CVE-2019-7170

A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/taxonomy/vocabularies...

PT-2019-18450

Name of the Vulnerable Software and Affected Versions Croogo versions prior to 3.0.6 Description A stored-self XSS issue exists, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to "/admin/taxonomy/vocabularies". Recommendations For versions prior to 3.0.6, upda...