| Package | Affected versions | Patched versions |
|---|---|---|
| syguestbook a5 | = 1.2 |
SyGuestBook A5 Version 1.2 allows stored XSS because the isValidData function in include/functions.php does not properly block XSS payloads, as demonstrated by a crafted use of the onerror attribute of an IMG element.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free