| Package | Affected versions | Patched versions |
|---|---|---|
| http commander | = 7.0.0≥ 5.0.0, < 5.3.6 | 5.3.6 |
A stored cross-site scripting (XSS) vulnerability in the admin interface in Element-IT HTTP Commander 7.0.0 allows unauthenticated users to get admin access by injecting a malicious script in the User-Agent field.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free