VYPR

milk-admin

by giuliopanda

CVEs (2)

  • CVE-2026-51565Jul 27, 2026
    risk 0.00cvss epss 0.00

    Cross-site scripting (XSS) vulnerability in Modules/Docs/DocsController.php in Milk admin <=0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request

  • CVE-2026-51564Jul 27, 2026
    risk 0.00cvss epss 0.01

    An issue in the redirect parameter in Milk admin <=0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request.