A stored cross-site scripting (XSS) vulnerability in Dcat-Admin v2.1.3-beta allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter.
| Software | From | Fixed in |
|---|---|---|
dcat / laravel-admin
|
- | 2.1.3-beta.x |
| dcatadmin / dcat_admin | 2.1.3-beta | 2.1.3-beta.x |