| Package | Affected versions | Patched versions |
|---|---|---|
| vitalpbx | = 3.2.3 |
VitalPBX version 3.2.3-8 allows an unauthenticated external attacker to obtain the instance's administrator account via a malicious link. This is possible because the application is vulnerable to XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free