| Package | Affected versions | Patched versions |
|---|---|---|
| shop-script | = 5.2.2.30933 |
Cross-site scripting (XSS) vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote attackers to inject arbitrary web script or HTML via the phone number field in a new contact to phpecom/index.php/webasyst/contacts/.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free