An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component.
| Software | From | Fixed in |
|---|---|---|
croogo / croogo
|
- | 3.0.2.x |
| croogo / croogo | 3.0.2 | 3.0.2.x |