VDB
Sign up
MEDIUM4.8

GHSA-37x3-j9jq-vrjx

Dcat-Admin Cross-Site Scripting (XSS) vulnerability

Details

Dcat-Admin v2.2.0-beta and v2.2.2-beta contains a Cross-Site Scripting (XSS) vulnerability via /admin/auth/menu and /admin/auth/extensions.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/dcat/laravel-admin

No fixed version published yet for dcat/laravel-admin (composer). Pin to a known-safe version or switch to an alternative.

Packagist/dcat/laravel-admin

No fixed version published yet for dcat/laravel-admin (composer). Pin to a known-safe version or switch to an alternative.

References