CVE-2019-20789: Croogo

Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies.

Affected products

• Croogo Croogo: up to and including 3.0.6

Published 2020-04-26. Last modified 2026-06-17.