| Package | Affected versions | Patched versions |
|---|---|---|
| friendica | = 2023.12 |
Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the lack of file type filtering in the file attachment parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free