| Package | Affected versions | Patched versions |
|---|---|---|
| galette | = 1.2.0< 1.2.0 | 1.2.0 |
Galette is a membership management web application for non profit organizations. Versions 1.1.5.2 and below allow a user to edit a group name and insert an XSS payload. This issue is fixed in version 1.2.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free