| Package | Affected versions | Patched versions |
|---|---|---|
| pachno | < 1.0.6 | 1.0.6 |
A vulnerability has been identified in Pachno 1.0.6 allowing an authenticated attacker to execute a cross-site scripting (XSS) attack. The vulnerability exists due to inadequate input validation in the Project Description and comments, which enables an attacker to inject malicious java script.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free