Croogo Cross-Site Scripting Vulnerability

Croogo is a content management system CMS based on the CakePHP framework development . The system provides content type can be customized for Blog, Node, Page, content editing using WYSIWYG editor and other features. A cross-site scripting vulnerability exists in Page name in Croogo version...

Cross-site Scripting (XSS)

SilverStripe CMS is vulnerable to cross-site scripting XSS attacks. These attacks are possible through a page name such as "...