Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-yfg9-tt5q-2qh2

Summary

Cross-site Scripting
A stored-self XSS exists in Croogo allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to `/admin/blocks/blocks/edit/8`.

Aliases

alias	CVE-2019-7171

alias	GHSA-v6q8-8wgx-8hm7

Fixed_packages

url pkg:composer/croogo/croogo@3.0.6

purl pkg:composer/croogo/croogo@3.0.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@3.0.6

url pkg:composer/croogo/croogo@3.0.7

purl pkg:composer/croogo/croogo@3.0.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-u4c2-vpqk-cfcj

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@3.0.7

Affected_packages

url pkg:composer/croogo/croogo@2.0.0

purl pkg:composer/croogo/croogo@2.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-vg41-vx82-pfb5

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@2.0.0

url pkg:composer/croogo/croogo@2.1.0

purl pkg:composer/croogo/croogo@2.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-vg41-vx82-pfb5

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@2.1.0

url pkg:composer/croogo/croogo@2.1.1

purl pkg:composer/croogo/croogo@2.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-vg41-vx82-pfb5

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@2.1.1

url pkg:composer/croogo/croogo@2.1.2

purl pkg:composer/croogo/croogo@2.1.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-vg41-vx82-pfb5

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@2.1.2

url pkg:composer/croogo/croogo@2.2.0

purl pkg:composer/croogo/croogo@2.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-vg41-vx82-pfb5

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@2.2.0

url pkg:composer/croogo/croogo@2.2.1

purl pkg:composer/croogo/croogo@2.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-vg41-vx82-pfb5

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@2.2.1

url pkg:composer/croogo/croogo@2.2.2

purl pkg:composer/croogo/croogo@2.2.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-vg41-vx82-pfb5

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@2.2.2

url pkg:composer/croogo/croogo@2.2.3

purl pkg:composer/croogo/croogo@2.2.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-vg41-vx82-pfb5

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@2.2.3

url pkg:composer/croogo/croogo@2.2.4

purl pkg:composer/croogo/croogo@2.2.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-vg41-vx82-pfb5

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@2.2.4

url pkg:composer/croogo/croogo@2.3.0

purl pkg:composer/croogo/croogo@2.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-vg41-vx82-pfb5

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@2.3.0

url pkg:composer/croogo/croogo@2.3.1

purl pkg:composer/croogo/croogo@2.3.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-c4yu-nrfy-jyh1

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-vg41-vx82-pfb5

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@2.3.1

url pkg:composer/croogo/croogo@2.3.2

purl pkg:composer/croogo/croogo@2.3.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-vg41-vx82-pfb5

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@2.3.2

url pkg:composer/croogo/croogo@2.3.3

purl pkg:composer/croogo/croogo@2.3.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-vg41-vx82-pfb5

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@2.3.3

url pkg:composer/croogo/croogo@3.0.0-alpha.1

purl pkg:composer/croogo/croogo@3.0.0-alpha.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-vg41-vx82-pfb5

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@3.0.0-alpha.1

url pkg:composer/croogo/croogo@3.0.0-alpha.2

purl pkg:composer/croogo/croogo@3.0.0-alpha.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-vg41-vx82-pfb5

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@3.0.0-alpha.2

url pkg:composer/croogo/croogo@3.0.0-alpha.3

purl pkg:composer/croogo/croogo@3.0.0-alpha.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-vg41-vx82-pfb5

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@3.0.0-alpha.3

url pkg:composer/croogo/croogo@3.0.0-alpha.4

purl pkg:composer/croogo/croogo@3.0.0-alpha.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-vg41-vx82-pfb5

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@3.0.0-alpha.4

url pkg:composer/croogo/croogo@3.0.0-beta.1

purl pkg:composer/croogo/croogo@3.0.0-beta.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-vg41-vx82-pfb5

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@3.0.0-beta.1

url pkg:composer/croogo/croogo@3.0.0

purl pkg:composer/croogo/croogo@3.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-vg41-vx82-pfb5

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@3.0.0

url pkg:composer/croogo/croogo@3.0.1

purl pkg:composer/croogo/croogo@3.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-vg41-vx82-pfb5

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@3.0.1

url pkg:composer/croogo/croogo@3.0.2

purl pkg:composer/croogo/croogo@3.0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2437-j6m3-b3ed

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-vg41-vx82-pfb5

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@3.0.2

url pkg:composer/croogo/croogo@3.0.3

purl pkg:composer/croogo/croogo@3.0.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@3.0.3

url pkg:composer/croogo/croogo@3.0.4

purl pkg:composer/croogo/croogo@3.0.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@3.0.4

url pkg:composer/croogo/croogo@3.0.5

purl pkg:composer/croogo/croogo@3.0.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8t44-pesj-4ba3

vulnerability	VCID-afq3-788s-kbbn

vulnerability	VCID-cqd8-gd28-qudd

vulnerability	VCID-s7py-9k61-auds

vulnerability	VCID-u4c2-vpqk-cfcj

vulnerability	VCID-v4dg-bkns-1uah

vulnerability	VCID-yfg9-tt5q-2qh2

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/croogo/croogo@3.0.5

References

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2019-7171

reference_id

reference_type

scores

value	0.00219
scoring_system	epss
scoring_elements	0.44488
published_at	2026-06-04T12:55:00Z

value	0.00219
scoring_system	epss
scoring_elements	0.44566
published_at	2026-06-06T12:55:00Z

value	0.00219
scoring_system	epss
scoring_elements	0.44558
published_at	2026-06-05T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2019-7171

reference_url

https://github.com/croogo/croogo

reference_id

reference_type

scores

value	4.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/croogo/croogo

reference_url

https://github.com/croogo/croogo/commit/cafaaabe2cef3d1d83652370e30563e6ad7c4158

reference_id

reference_type

scores

value	4.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/croogo/croogo/commit/cafaaabe2cef3d1d83652370e30563e6ad7c4158

reference_url

https://github.com/croogo/croogo/issues/887

reference_id

reference_type

scores

value	4.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/croogo/croogo/issues/887

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2019-7171

reference_id

CVE-2019-7171

reference_type

scores

value	4.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://nvd.nist.gov/vuln/detail/CVE-2019-7171

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	79
name	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description	The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

Exploits

Severity_range_score 4.0 - 6.9

Exploitability 0.5

Weighted_severity 6.2

Risk_score 3.1

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yfg9-tt5q-2qh2

Vulnerability Instance