| Package | Affected versions | Patched versions |
|---|---|---|
| citadel | < 994 | 994 |
A cross-site scripting vulnerability exists in Citadel versions prior to 994. When a malicious user sends an instant message with some JavaScript code, the script may be executed on the web browser of the victim user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free