CVE-2024-54775

Dcat-Admin v2.2.0-beta and v2.2.2-beta contains a Cross-Site Scripting XSS vulnerability via /admin/auth/menu and /admin/auth/extensions...

CVE-2024-54775

The Dcat-Admin backend system builder, specifically versions v2.2.0-beta and v2.2.2-beta , is susceptible to a Cross-Site Scripting (XSS) vulnerability. The flaw exists in the improper neutralization of input during web page generation, reachable via the /admin/auth/menu and /admin/auth/extension...