← Database

CVE-2024-55416

LOW CVSS: 3.5 Published: 2025-01-30 Modified: 2026-06-17

Description

DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a link, arbitrary Javascript can be executed.

Affected Platforms

Thecontrolgroup Voyager

Weakness Type

CWE-79

References