| Package | Affected versions | Patched versions |
|---|---|---|
| itop | ≥ 3.0.0, < 3.0.4≥ 3.1.0, < 3.1.1< 2.7.1 | 3.0.43.1.12.7.1 |
iTop is an IT service management platform. Dashlet edits ajax endpoints can be used to produce XSS. Fixed in iTop 2.7.10, 3.0.4, and 3.1.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free