| Package | Affected versions | Patched versions |
|---|---|---|
| messenger | = 5.0 |
Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary script as other users via the addview parameter of a ymsgr URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free