| Package | Affected versions | Patched versions |
|---|---|---|
| osdate | = 1.1.5= 1.1.6≤ 1.1.7 |
Cross-site scripting (XSS) vulnerability in showprofile.php in Darren's $5 Script Archive osDate 1.1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the onerror attribute in an HTML IMG tag with a non-existent source file in txtcomment parameter, which is used when posting a comment.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free