| Package | Affected versions | Patched versions |
|---|---|---|
| quantastor | < 6.0.0.355 | 6.0.0.355 |
An attacker is able to launch a Reflected XSS attack using a crafted URL. POC: Visit the following URL https://<IPADDRESS>:8153/qstorapi/echo?inputMessage=<img%20src=x%20onerror=alert(document.cookie)>
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free