| Package | Affected versions | Patched versions |
|---|---|---|
| iguana | ≥ 4.0.0, < 4.5.02 | 4.5.02 |
A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's browser. The module parameter on the Service.template.cls endpoint does not properly neutralise user input, resulting in the vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free