← All advisories

Medium severity4.8NVD Advisory· Published Dec 27, 2024· Updated Jun 17, 2026

CVE-2024-54775

CVE-2024-54775

Description

Dcat-Admin v2.2.0-beta and v2.2.2-beta contains a Cross-Site Scripting (XSS) vulnerability via /admin/auth/menu and /admin/auth/extensions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Dcatadmin/Dcat Admin2 versions
cpe:2.3:a:dcatadmin:dcat_admin:2.2.0:beta:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dcatadmin:dcat_admin:2.2.0:beta:*:*:*:*:*:*
- cpe:2.3:a:dcatadmin:dcat_admin:2.2.2:beta:*:*:*:*:*:*
Dcat-Admin/Dcat-Admindescription
ghsa-coords
pkg:composer/dcat/laravel-admin

Patches

Vulnerability mechanics

References

3

github.com/taynes-llllzt/taynes/issues/5nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-37x3-j9jq-vrjxghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-54775ghsaADVISORY

News mentions

0

No linked articles in our index yet.