| Package | Affected versions | Patched versions |
|---|---|---|
| twenty | = 0.3.0 |
The CRM platform Twenty is vulnerable to stored cross site scripting via file upload in version 0.3.0. A crafted svg file can trigger the execution of the javascript code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free