| Package | Affected versions | Patched versions |
|---|---|---|
| bbs-go | ≤ 3.5.5 |
Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free