| Package | Affected versions | Patched versions |
|---|---|---|
| shoutpro | ≤ 1.5.2 |
Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary PHP code into shouts.php via the shout parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free