| Package | Affected versions | Patched versions |
|---|---|---|
| caddy | = 2.1.4= 2.1.5= 2.1.6= 3.0.0= 4.0.0= 4.0.1= 4.0.12= 4.0.2= 4.0.3= 6.0.1= 6.0.12= 6.0.14= 6.0.2= 6.0.9= 6.1.0= 6.2.1= 6.3.0= 6.3.1= 6.3.3= 7.0.0= 7.1.0= 7.2.7 |
An issue was discovered in caddy (for TYPO3) before 7.2.10. The vulnerability exists due to insufficient filtration of user-supplied data in the "paymillToken" HTTP POST parameter passed to the "caddy/Resources/Public/JavaScript/e-payment/paymill/api/php/payment.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free