| Package | Affected versions | Patched versions |
|---|---|---|
| sage xrt business exchange | = 12.4.302 |
Multiple SQL injections in Sage XRT Business Exchange 12.4.302 allow an authenticated attacker to inject malicious data in SQL queries: Add Currencies, Payment Order, and Transfer History.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free