| Package | Affected versions | Patched versions |
|---|---|---|
| witycms | = 0.6.2 |
A "search for user discovery" injection issue exists in Creatiwity wityCMS 0.6.2 via the "Utilisateur" menu. No input parameters are filtered, e.g., the /admin/user/users Nickname, email, firstname, lastname, and groupe parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free