4 matches found
CVE-2024-54774
Dcat Admin v2.2.0-beta contains a cross-site scripting XSS vulnerability in /admin/articles/create...
4.8CVSS4.9AI score0.0033EPSS
SaveExploits1References1
CVE-2024-54774
Dcat Admin version v2.2.0-beta is vulnerable to a cross-site scripting (XSS) vulnerability within the /admin/articles/create endpoint. The root cause is the lack of effective filtering and escaping of user-supplied data, which allows an attacker to execute arbitrary web scripts or HTML by injecti...
4.8CVSS5.8AI score0.0033EPSS
SaveExploits1References1Affected Software1
20