Security Advisory

CVE-2019-7173

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-01-29 18:00:00
Last updated 2024-09-17 00:20:34
Assigner mitre
State PUBLISHED

Description

A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/file-manager/attachments/edit/4.