| Package | Affected versions | Patched versions |
|---|---|---|
| omega-psir | ≥ 4.5.9, < 4.6.7 | 4.6.7 |
Omega-PSIR is vulnerable to Reflected XSS via the lang parameter. An attacker can craft a malicious URL that, when opened, causes arbitrary JavaScript to execute in the victim’s browser. This issue was fixed in 4.6.7.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free