| Package | Affected versions | Patched versions |
|---|---|---|
| ofbiz | ≥ 16.11.01, ≤ 16.11.07 |
Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free