| Package | Affected versions | Patched versions |
|---|---|---|
| wecenter | ≥ 3.2.0, ≤ 3.2.2 |
WeCenter 3.2.0 through 3.2.2 has XSS in the views/default/question/index.tpl.html htmlspecialchars_decode function via the /?/publish/ajax/publish_question/ question_content parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free