Description
Croogo version 2.3.1-17-g6f82e6c contains a Cross Site Scripting (XSS) vulnerability in Page name that can result in execution of javascript code.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2022-5086 | Croogo version 2.3.1-17-g6f82e6c contains a Cross Site Scripting (XSS) vulnerability in Page name that can result in execution of javascript code. |
Github GHSA |
GHSA-r4h9-gv2m-9x97 | Cross site scripting in Croogo |
References
| Link | Providers |
|---|---|
| https://github.com/croogo/croogo/issues/847 |
|
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-05T22:00:41.658Z
Reserved: 2018-01-29T00:00:00.000Z
Link: CVE-2017-1000510
No data.
Status : Modified
Published: 2018-02-09T23:29:00.387
Modified: 2026-06-17T00:59:18.350
Link: CVE-2017-1000510
No data.
OpenCVE Enrichment
No data.
Weaknesses
-
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EUVD
Github GHSA