Threats affecting pkg:github/jqhph/dcat-admin

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	EPSS 0.5%	CVE-2025-65656dcat-admin · PHP Remote File Inclusion Critical9.8EPSS 0.5%2025-12-02CVE Database V5CVE-2025-65656 dcat-admin v2.2.3-beta and before is vulnerable to file inclusion in admin/src/Extend/VersionManager.php. EPSS 0.5%Vulnerability CWE-98	CVE Database V5	2025-12-02
Medium	4.8	EPSS 0.3%	CVE-2024-54775dcat-admin · Cross-site Scripting Medium4.8EPSS 0.3%2024-12-27CVE Database V5CVE-2024-54775 Dcat-Admin v2.2.0-beta and v2.2.2-beta contains a Cross-Site Scripting (XSS) vulnerability via /admin/auth/menu and /admin/auth/extensions. EPSS 0.3%Vulnerability CWE-79	CVE Database V5	2024-12-27
Medium	6.1	EPSS 0.6%	CVE-2024-29644dcat-admin · Cross-site Scripting Medium6.1EPSS 0.6%2024-03-26CVE Database V5CVE-2024-29644 Cross Site Scripting vulnerability in dcat-admin v.2.1.3 and before allows a remote attacker to execute arbitrary code via a crafted script to the user login box. EPSS 0.6%Vulnerability CWE-79	CVE Database V5	2024-03-26

Page 1 of 1