| Package | Affected versions | Patched versions |
|---|---|---|
| croogo/croogo | < 3.0.7 | 3.0.7 |
| croogo | ≤ 3.0.6 |
Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free