5 matches found
CVE-2019-20789
Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies...
PT-2020-10762
Name of the Vulnerable Software and Affected Versions Croogo versions prior to 3.0.7 Description The issue allows for XSS attacks via the title to "admin/menus/menus" or "admin/taxonomy/vocabularies". Recommendations For versions prior to 3.0.7, update to version 3.0.7 or later to resolve the...
CVE-2019-20789: Improper Neutralization of Input During Web Page Generation
Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies...
CVE-2019-7169: Improper Neutralization of Input During Web Page Generation
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/menus/menus/edit/3...
PT-2019-18449
Name of the Vulnerable Software and Affected Versions Croogo versions through 3.0.5 Description A stored-self XSS issue allows an attacker to execute HTML or JavaScript code in a vulnerable Title field to the "/admin/menus/menus/edit/3" API endpoint. Recommendations For versions through 3.0.5, as...