| Package | Affected versions | Patched versions |
|---|---|---|
| qibocms | = v7 |
Cross Site Scripting (XSS) in Qibosoft QiboCMS v7 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information by injecting arbitrary commands in a HTTP request to the "ewebeditor\3.1.1\kindeditor.js" component.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free