| Package | Affected versions | Patched versions |
|---|---|---|
| open searchable image catalogue | ≤ 0.7.0.0 |
Cross-site scripting (XSS) vulnerability in the do_mysql_query function in core.php for Open Searchable Image Catalogue (OSIC) before 0.7.0.1 allows remote attackers to inject arbitrary web scripts or HTML via failed SQL queries, which is reflected in an error message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free