| Package | Affected versions | Patched versions |
|---|---|---|
| smart evision | = 2022.02.21 |
Smart eVision has insufficient filtering for special characters in the POST Data parameter in the specific function. An unauthenticated remote attacker can inject JavaScript to perform XSS (Stored Cross-Site Scripting) attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free