| Package | Affected versions | Patched versions |
|---|---|---|
| ifme | ≥ 7.22.0, ≤ 7.31.4 |
In “ifme”, versions v7.22.0 to v7.31.4 are vulnerable against self-stored XSS in the contacts field as it allows loading XSS payloads fetched via an iframe.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free