| Package | Affected versions | Patched versions |
|---|---|---|
| sitekiosk | = 4.9.11= 4.9.14= 4.96= 4.96.0= 4.96.3= 4.97.0= 5.0.19= 5.0.238= 5.0.248= 5.0.26= 5.0.264= 5.0.32= 5.0.35= 5.0.36= 5.0.38= 5.0.41= 5.5.34= 5.5.35= 5.5.36= 5.5.39= 5.5.45= 6.0.14= 6.0.98_final= 6.2.51= 6.5.149 |
Cross-site scripting (XSS) vulnerability in the skinning feature in SiteKiosk before 6.5.150 allows local users to bypass security protections and inject arbitrary web script or HTML via an ABOUT: URI, which is displayed in the title bar of the browser.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free