MEDIUM6.1

GHSA-mr24-cf69-5chq

dcat-admin Cross Site Scripting vulnerability

Details

Cross Site Scripting vulnerability in dcat-admin v.2.1.3 and before allows a remote attacker to execute arbitrary code via a crafted script to the user login box.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/dcat/laravel-admin

Introduced in: 0

No fixed version published yet for dcat/laravel-admin (composer). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2024-29644[ADVISORY]
https://github.com/jqhph/dcat-admin[PACKAGE]
https://www.yuque.com/yangtu-swjrh/oc6nqi/epcbz5y1grl4il1m[WEB]