CVE-2019-7168

2019-01-2918:29:00

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

JSON

A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Blog field to /admin/nodes/nodes/add/blog.

CPENameOperatorVersion
croogoeq2.3.2
croogoeq1.4.5
croogoeq2.1.0
croogoeq3.0.1
croogoeq3.0.0-alpha.4
croogoeq2.2.0
croogoeq2.1.2
croogoeq1.4.3
croogoeq3.0.3
croogoeq3.0.0-alpha.3