| Package | Affected versions | Patched versions |
|---|---|---|
| easycms | = 1.4 |
The removeXSS function in App/Common/common.php (called from App/Modules/Index/Action/SearchAction.class.php) in EasyCMS v1.4 allows XSS via an onhashchange event.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free