medium4.8
CVE-2019-20789
Croos-site scripting in Croogo
Impact
Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | croogo/croogo | < 3.0.7 | 3.0.7 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Croogo | Croogo | through 3.0.6 |