medium6.1
CVE-2024-29644
dcat-admin Cross Site Scripting vulnerability
Impact
Cross Site Scripting vulnerability in dcat-admin v.2.1.3 and before allows a remote attacker to execute arbitrary code via a crafted script to the user login box.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | dcat/laravel-admin | <= 2.1.3 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dcatadmin | Dcat Admin | through 1.7.9 Versions 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4 |