| Package | Affected versions | Patched versions |
|---|---|---|
| jamovi | ≤ 1.6.18 |
Jamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability. The column-name is vulnerable to XSS in the ElectronJS Framework. An attacker can make a .omv (Jamovi) document containing a payload. When opened by victim, the payload is triggered.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free