Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-51564 1 Giuliopanda 1 Milk Admin 2026-07-30 4.9 Medium
An issue in the redirect parameter in Milk admin <=0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request.
CVE-2026-51565 1 Giuliopanda 1 Milk Admin 2026-07-30 N/A
Cross-site scripting (XSS) vulnerability in Modules/Docs/DocsController.php in Milk admin <=0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request