| Package | Affected versions | Patched versions |
|---|---|---|
| hortusfox | = 3.9 |
HortusFox v3.9 contains a stored XSS vulnerability in the "Add Plant" function. The name input field does not sanitize or escape user inputs, allowing attackers to inject and execute arbitrary JavaScript payloads.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free