| Package | Affected versions | Patched versions |
|---|---|---|
| clearcanvas | = 3.0 |
Synaptive Medical ClearCanvas ImageServer 3.0 Alpha allows XSS (and HTML injection) via the Default.aspx UserName parameter. NOTE: the issues/227 reference does not imply that the affected product can be downloaded from GitHub. It was simply a convenient location for a public bug report.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free