Critical CVSS: 9.1 CVE-2024-29643 An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component.