| Package | Affected versions | Patched versions |
|---|---|---|
| treasuryxpress | = 19191105 |
An XSS issue was discovered in TreasuryXpress 19191105. Due to the lack of filtering and sanitization of user input, malicious JavaScript can be executed throughout the application. A malicious payload can be injected within the Custom Workflow component and inserted via the Create New Workflow field. As a result, the payload is executed via the navigation bar throughout the application.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free