CVE-2024-29644

Published: Mar 26, 2024Modified: Apr 30, 2025

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Cross Site Scripting vulnerability in dcat-admin v.2.1.3 and before allows a remote attacker to execute arbitrary code via a crafted script to the user login box.

Affected (30)

Products: Dcatadmin: Dcat Admin

Dcatadmin

1 product

Dcat Admin

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Dcatadmin Dcat Admin	Up to 1.7.9
Dcatadmin Dcat Admin	Version 2.0.0 beta
Dcatadmin Dcat Admin	Version 2.0.10 beta
Dcatadmin Dcat Admin	Version 2.0.11 beta
Dcatadmin Dcat Admin	Version 2.0.12 beta
Dcatadmin Dcat Admin	Version 2.0.13 beta
Dcatadmin Dcat Admin	Version 2.0.14 beta
Dcatadmin Dcat Admin	Version 2.0.15 beta
Dcatadmin Dcat Admin	Version 2.0.16 beta
Dcatadmin Dcat Admin	Version 2.0.17 beta
Dcatadmin Dcat Admin	Version 2.0.18 beta
Dcatadmin Dcat Admin	Version 2.0.19 beta
Dcatadmin Dcat Admin	Version 2.0.1 beta
Dcatadmin Dcat Admin	Version 2.0.20 beta
Dcatadmin Dcat Admin	Version 2.0.21 beta
Dcatadmin Dcat Admin	Version 2.0.22 beta
Dcatadmin Dcat Admin	Version 2.0.23 beta
Dcatadmin Dcat Admin	Version 2.0.24 beta
Dcatadmin Dcat Admin	Version 2.0.2 beta
Dcatadmin Dcat Admin	Version 2.0.3 beta
Dcatadmin Dcat Admin	Version 2.0.4 beta
Dcatadmin Dcat Admin	Version 2.0.5 beta
Dcatadmin Dcat Admin	Version 2.0.6 beta
Dcatadmin Dcat Admin	Version 2.0.7 beta
Dcatadmin Dcat Admin	Version 2.0.8 beta
Dcatadmin Dcat Admin	Version 2.0.9 beta
Dcatadmin Dcat Admin	Version 2.1.0 beta
Dcatadmin Dcat Admin	Version 2.1.1 beta
Dcatadmin Dcat Admin	Version 2.1.2 beta
Dcatadmin Dcat Admin	Version 2.1.3 beta