What is GHSA-g7j6-3fjr-c3r8?

GHSA-g7j6-3fjr-c3r8 is a security advisory published by GitHub Security Advisories with Medium severity. Cross-site scripting (XSS) vulnerability in Modules/Docs/DocsController.php in Milk admin \u003c=0.9.8...

Which CVE IDs does GHSA-g7j6-3fjr-c3r8 cover?

GHSA-g7j6-3fjr-c3r8 covers the following CVE IDs: CVE-2026-51565. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-g7j6-3fjr-c3r8?

GHSA-g7j6-3fjr-c3r8 has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

GHSA-g7j6-3fjr-c3r8MediumCVSS 6.1

Cross-site scripting (XSS) vulnerability in Modules/Docs/DocsController.php in Milk admin <=0.9.8...

Vendor

GitHub Security Advisories

Published

July 28, 2026

Last Modified

July 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-51565 →

📋 Description

Cross-site scripting (XSS) vulnerability in Modules/Docs/DocsController.php in Milk admin <=0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-51565
https://github.com/1337Skid/CVE-2026-51565
https://github.com/giuliopanda/milk-admin
https://github.com/giuliopanda/milk-admin/blob/6389386de2a9226c84ecb7e79cd16d7c027952ad/milkadmin/Modules/Docs/DocsController.php
https://github.com/advisories/GHSA-g7j6-3fjr-c3r8