| Package | Affected versions | Patched versions |
|---|---|---|
| victor cms | = 1.0 |
Victor CMS 1.0 contains a stored cross-site scripting vulnerability in the 'comment_author' POST parameter that allows attackers to inject malicious scripts. Attackers can submit crafted JavaScript payloads through the comment submission form to execute arbitrary code in victim browsers.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free