Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

dcat/laravel-admin

4 known vulnerabilities (4 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 4 medium
Registry
Packagist

Advisories 4

  • CVE-2024-54775Medium 4.8

    Dcat-Admin v2.2.0-beta and v2.2.2-beta contains a Cross-Site Scripting (XSS) vulnerability via /admin/auth/menu and /admin/auth/extensions.

    Affected: versions 2.2.0-beta; versions 2.2.2-beta.

  • CVE-2024-54774Medium 4.8

    Dcat Admin v2.2.0-beta contains a cross-site scripting (XSS) vulnerability in /admin/articles/create.

    Affected: versions 2.2.0-beta.

  • CVE-2024-29644Medium 6.1

    Cross Site Scripting vulnerability in dcat-admin v.2.1.3 and before allows a remote attacker to execute arbitrary code via a crafted…

    Affected: through 2.1.3.

  • CVE-2023-33736Medium 5.4

    A stored cross-site scripting (XSS) vulnerability in Dcat-Admin v2.1.3-beta allows attackers to execute arbitrary web scripts or HTML via…

    Affected: through 2.1.3-beta.