| Package | Affected versions | Patched versions |
|---|---|---|
| doracms | ≤ 2.18 |
Cross Site Scripting vulnerability in DOraCMS v.2.18 and before allows a remote attacker to execute arbitrary code via the markdown0 function in the /app/public/apidoc/oas3/wrap-components/markdown.jsx endpoint.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free