| Package | Affected versions | Patched versions |
|---|---|---|
| linkorcms | = 1.1= 1.2≤ 1.2 |
Multiple cross-site scripting (XSS) vulnerabilities in index.php in LinkorCMS 1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the searchstr parameter in a search action; or the (2) nikname, (3) realname, (4) homepage, or (5) city parameter in a registration action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free