| Package | Affected versions | Patched versions |
|---|---|---|
| itop | < 2.6.4< 2.7.0 | 2.6.42.7.0 |
In Combodo iTop, dashboard ids can be exploited with a reflective XSS payload. This is fixed in all iTop packages (community, essential, professional) for version 2.7.0 and in iTop essential and iTop professional packages for version 2.6.4.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free