Croogo versions before 4.x contain a Cross Site Scripting (XSS) vulnerability in Page name that can result in execution of javascript code.
References:GSA_kwCzR0hTQS1yNGg5LWd2Mm0tOXg5N84AAXVy
Cross site scripting in Croogo
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
| packagist:croogo/croogo | < 4.0.0 | 4.0.0 | |
Affected Version RangesAll affected versions2.0.0, 2.1.0, 2.1.1, 2.1.2, 2.2.0, 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.3.0, 2.3.1, 2.3.2, 2.3.3, 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7 All unaffected versions4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.0.7 |
|||