CVE-2024-54775: Dcatadmin Dcat Admin

Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Dcat-Admin v2.2.0-beta and v2.2.2-beta contains a Cross-Site Scripting (XSS) vulnerability via /admin/auth/menu and /admin/auth/extensions.

Affected products

• Dcatadmin Dcat Admin: version 2.2.0 only; version 2.2.2 only

Published 2024-12-27. Last modified 2026-06-17.