Medium severity6.1GHSA Advisory· Published Aug 26, 2024· Updated Apr 15, 2026

CVE-2024-42818

Description

A cross-site scripting (XSS) vulnerability in the Config-Create function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
fastapi-adminPyPI	<= 0.1.4	—

Affected products

Fastapiadmin/FastapiadminGHSA
Range: <= 0.1.4
ghsa-coords
pkg:pypi/fastapi-admin
Range: <= 0.1.4

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-grqx-r2q2-j425ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-42818ghsaADVISORY
fastapi-admin-pro.long2ice.io/admin/loginnvdWEB
github.com/fastapi-admin/fastapi-admin/issues/172nvdWEB

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000