CVE-2019-20789

2020-04-2617:15:11

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.4%

JSON

Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies.

CPENameOperatorVersion
croogoeq2.3.2
croogoeq1.4.5
croogoeq2.1.0
croogoeq3.0.1
croogoeq3.0.0-alpha.4
croogoeq2.2.0
croogoeq2.1.2
croogoeq1.4.3
croogoeq3.0.3
croogoeq3.0.0-alpha.3

Name	Operator	Version
croogo	eq	2.3.2
croogo	eq	1.4.5
croogo	eq	2.1.0
croogo	eq	3.0.1
croogo	eq	3.0.0-alpha.4
croogo	eq	2.2.0
croogo	eq	2.1.2
croogo	eq	1.4.3
croogo	eq	3.0.3
croogo	eq	3.0.0-alpha.3

Rows per page:

1-10 of 501

References

github.com/croogo/croogo/compare/3.0.6...3.0.7

github.com/croogo/croogo/issues/940