| Package | Affected versions | Patched versions |
|---|---|---|
| publify_core | < 9.2.9 | 9.2.9 |
| publify | < 9.2.9 | 9.2.9 |
Unrestricted file upload allowed the attacker to manipulate the request and bypass the protection of HTML files using a text file. Stored XSS may be obtained.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free