| Package | Affected versions | Patched versions |
|---|---|---|
| nc-cms | ≤ 2017-03-10 |
An issue was discovered in nc-cms through 2017-03-10. index.php?action=edit_html&name=home_content allows XSS via the HTML Source Editor. NOTE: the vendor disputes this because the form requires administrator privileges, and entering JavaScript is supported functionality
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free