| Package | Affected versions | Patched versions |
|---|---|---|
| obsidian | = 18.0.17 |
A GET-based XSS reflected vulnerability in Plesk Obsidian 18.0.17 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free