Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies.
CVSS Score
4.8
EPSS Score
0.003
Published
2020-04-26