CVE-2019-7168

NONE EPSS 44.7%

Published Jan 29, 20197y ago · Modified Jun 17, 20262w ago

Published Jan 29, 2019 7y ago

Last Modified Jun 17, 2026 2w ago

Description

A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Blog field to /admin/nodes/nodes/add/blog.

Threat Intelligence

EPSS Exploit Probability

44.7% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 1

Vendor	Product	Version	Range
croogo	croogo	*	≤3.0.5

References 1

github.com https://github.com/croogo/croogo/issues/886

ExploitIssue TrackingThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.