| Package | Affected versions | Patched versions |
|---|---|---|
| flyspray | ≤ 1.0 |
Stored XSS vulnerability in Flyspray before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileges, via the real_name or email_address field to themes/CleanFS/templates/common.editallusers.tpl.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free