8 matches found
CVE-2019-20789
Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies...
EUVD-2022-5086
Malicious code in bioql PyPI...
PT-2025-17297 · Croogo · Croogo
Name of the Vulnerable Software and Affected Versions: croogo version 3.0.2 Description: The issue allows an attacker to perform Host header injection via the feed.rss component. Recommendations: For croogo version 3.0.2, consider disabling the feed.rss component until a patch is available...
CVE-2024-29643
The croogo v.3.0.2 CMS is vulnerable to Host header injection via its feed.rss component. The flaw occurs because the component takes the content of the -H argument from a request and passes it into the element of a response without proper filtering. An attacker can exploit this to redirect user...
CVE-2019-20789
Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies...
Cross site scripting
Croogo version 2.3.1-17-g6f82e6c contains a Cross Site Scripting XSS vulnerability in Page name that can result in execution of javascript code...
