| Package | Affected versions | Patched versions |
|---|---|---|
| sherlockim | ≤ 2021-03-29 |
Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting (XSS) by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free