| Package | Affected versions | Patched versions |
|---|---|---|
| website baker | = 2.5.2= 2.6= 2.6.1 |
Cross-site scripting (XSS) vulnerability in Website Baker CMS before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a user display name.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free