| Package | Affected versions | Patched versions |
|---|---|---|
| xbtit | ≤ 2.5.4 |
An issue was discovered in BTITeam XBTIT. By using String.replace and eval, it is possible to bypass the includes/crk_protection.php anti-XSS mechanism that looks for a number of dangerous fingerprints.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free