Thecontrolgroup: >> Voyager >> 1.4.2 Security Vulnerabilities
DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.
CVSS Score
5.7
EPSS Score
0.366
Published
2025-01-30
DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a link, arbitrary Javascript can be executed.
CVSS Score
3.5
EPSS Score
0.003
Published
2025-01-30
DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web shell causing arbitrary code execution on the server.
CVSS Score
4.3
EPSS Score
0.033
Published
2025-01-30