| Package | Affected versions | Patched versions |
|---|---|---|
| qloapps | = 1.6.0 |
An unauthenticated Cross-Site Scripting (XSS) vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via GET configure parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free