Dcat-Admin v2.2.0-beta and v2.2.2-beta contains a Cross-Site Scripting (XSS) vulnerability via /admin/auth/menu and /admin/auth/extensions.
| Software | From | Fixed in |
|---|---|---|
| dcatadmin / dcat_admin | 2.2.0-beta | 2.2.0-beta.x |
| dcatadmin / dcat_admin | 2.2.2-beta | 2.2.2-beta.x |