| Package | Affected versions | Patched versions |
|---|---|---|
| gestioip | = 3.5.7 |
The ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting (XSS). It allows data exfiltration and enables CSRF attacks. The vulnerability requires specific user permissions within the application to exploit successfully.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free