| Package | Affected versions | Patched versions |
|---|---|---|
| goanywhere managed file transfer | < 7.8.0 | 7.8.0 |
Missing input validation in certain features of the Web Client of Fortra's GoAnywhere prior to version 7.8.0 allows an attacker with permission to trigger emails to insert arbitrary HTML or JavaScript into an email.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free