| Package | Affected versions | Patched versions |
|---|---|---|
| francoisjacquet/rosariosis | < 7.6.1 | 7.6.1 |
| rosariosis | < 7.6.1 | 7.6.1 |
A Cross Site Scripting (XSS) vulnerabilty exits in RosarioSIS before 7.6.1 via the xss_clean function in classes/Security.php, which allows remote malicious users to inject arbitrary JaveScript of HTML.An example of affected components are all Markdown input fields.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free