| Package | Affected versions | Patched versions |
|---|---|---|
| openviva | < 2022-08-01 | 2022-08-01 |
A stored XSS in the process overview (bersicht zugewiesener Vorgaenge) in mbsupport openVIVA c2 20220101 allows a remote, authenticated, low-privileged attacker to execute arbitrary code in the victim's browser via name field of a process.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free