| Package | Affected versions | Patched versions |
|---|---|---|
| h-sphere | = 2.4.1= 2.4.1_patch_1= 2.4.1_patch_2= 2.4.1_patch_3= 2.4.1_patch_4= 2.4.1_patch_5= 2.4.1_patch_6= 2.4.1_patch_7= 2.4.2= 2.4.2_beta_1= 2.4.2_beta_2= 2.4.2_beta_3= 2.4.2_patch_1= 2.4.2_patch_2= 2.4.2_patch_3= 2.4.2_patch_4= 2.4.2_patch_5= 2.4.2_rc1= 2.4.2_rc2= 2.4.3= 2.4.3_beta_1= 2.4.3_beta_2= 2.4.3_patch_1= 2.4.3_patch_2= 2.4.3_patch_3= 2.4.3_patch_4= 2.4.3_patch_5= 2.4.3_patch_6= 2.4.3_patch_7= 2.4.3_patch_8= 2.4.3_rc1= 2.4.3_rc2 |
Cross-site scripting (XSS) vulnerability in the Hosting Control Panel (psoft.hsphere.CP) in Positive Software H-Sphere 2.4.3 Patch 8 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter in a login action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free