| Package | Affected versions | Patched versions |
|---|---|---|
| crazy bone | < 0.6.0 | 0.6.0 |
The crazy-bone plugin before 0.6.0 for WordPress has XSS via the User-Agent HTTP header.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free