| Package | Affected versions | Patched versions |
|---|---|---|
| maccms | ≤ 8.0 |
Maccms 8.0 allows XSS via the inc/config/cache.php t_key parameter because template/paody/html/vod_type.html mishandles the keywords parameter, and a/tpl/module/db.php only filters the t_name parameter (not t_key).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free