| Package | Affected versions | Patched versions |
|---|---|---|
| service provider management system | = 1.0 |
Cross Site Scripting vulnerability in Service Provider Management System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the firstname, middlename and lastname parameters in the /php-spms/admin/?page=user endpoint.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free