| Package | Affected versions | Patched versions |
|---|---|---|
| rockoa | = 1.9.8 |
RockOA V1.9.8 is affected by a cross-site scripting (XSS) vulnerability which allows remote attackers to send malicious code to the administrator and execute JavaScript code, because webmain/flow/input/mode_emailmAction.php does not perform strict filtering.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free