| Package | Affected versions | Patched versions |
|---|---|---|
| streaming engine | < 4.8.5 | 4.8.5 |
Wowza Streaming Engine before 4.8.5 allows XSS (issue 1 of 2). An authenticated user, with access to the proxy license editing is able to insert a malicious payload that will be triggered in the main page of server settings. This issue was resolved in Wowza Streaming Engine 4.8.5.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free