CVE-2019-20789

CVE-2019-20789

EPSS 0.7%

Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/croogo/croogo/compare/3.0.6...3.0.7 https://github.com/croogo/croogo/issues/940