| Package | Affected versions | Patched versions |
|---|---|---|
| jeesns | = 1.3 |
In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulnerability than CVE-2018-17886.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free