| Package | Affected versions | Patched versions |
|---|---|---|
| bluespice | ≥ 4.1.0, < 4.2.1 | 4.2.1 |
Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows user with admin privileges to inject arbitrary HTML into the main navigation of the application.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free