CVE-2019-20789

Published April 26th, 2020

View on NVD ↗

CVSS v3

4.8

MEDIUM

CVSS v2

3.5

LOW

Affected

1

PROJECT

Description

Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies.

A CakePHP powered Content Management System

GitHub

814