| Package | Affected versions | Patched versions |
|---|---|---|
| bandsite cms | = 1.1.4 |
Cross-site scripting (XSS) vulnerability in merchandise.php in BandSite CMS 1.1.4 allows remote attackers to inject arbitrary HTML or web script via the type parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free