| Package | Affected versions | Patched versions |
|---|---|---|
| cloud backup suite | < 8.1.1.50 | 8.1.1.50 |
An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. When creating a trial account, it is possible to inject XSS in the Alias field, allowing the attacker to retrieve the admin's cookie and take over the account.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free