CVE-2019-20789

Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies.

Date published : 2020-04-26

https://github.com/croogo/croogo/compare/3.0.6…3.0.7

https://github.com/croogo/croogo/issues/940