| Package | Affected versions | Patched versions |
|---|---|---|
| phpvideopro | ≤ 0.8.7 |
inc/vul_check.inc in phpVideoPro before 0.8.8 permits non-alphanumeric characters in the sess_id parameter, which has unknown impact and remote attack vectors, probably cross-site scripting (XSS).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free