CVE-2019-20789

Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies.

• CWE-79

• https://github.com/croogo/croogo/compare/3.0.6...3.0.7Third Party Advisory
• https://github.com/croogo/croogo/issues/940Exploit, Third Party Advisory
• https://github.com/croogo/croogo/compare/3.0.6...3.0.7Third Party Advisory
• https://github.com/croogo/croogo/issues/940Exploit, Third Party Advisory

Published

Apr 26, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-20783An issue was discovered on LG mobile devices with Android OS…9.1
• CVE-2019-20784An issue was discovered on LG mobile devices with Android OS…5.5
• CVE-2019-20785An issue was discovered on LG mobile devices with Android OS…6.8
• CVE-2019-20786handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 la…9.8
• CVE-2019-20787Teeworlds before 0.7.4 has an integer overflow when computin…9.8
• CVE-2019-20788libvncclient/cursor.c in LibVNCServer through 0.9.12 has a H…9.8
• CVE-2019-2079In libxaac, there is a possible out of bounds read due to a …6.5
• CVE-2019-20790OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-…9.8
• CVE-2019-20791OpenThread before 2019-12-13 has a stack-based buffer overfl…9.8
• CVE-2019-20792OpenSC before 0.20.0 has a double free in coolkey_free_priva…6.8
• CVE-2019-20794An issue was discovered in the Linux kernel 4.18 through 5.6…4.7
• CVE-2019-20795iproute2 before 5.1.0 has a use-after-free in get_netnsid_fr…4.4