| Package | Affected versions | Patched versions |
|---|---|---|
| hortusfox | = 4.4 |
A cross-site scripting (XSS) vulnerability in the /Calendar endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload injected into the add function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free