| Package | Affected versions | Patched versions |
|---|---|---|
| kerio control | = 9.3.0 |
A DOM based XSS in GFI Kerio Control v9.3.0 allows embedding of malicious code and manipulating the login page to send back a victim's cleartext credentials to an attacker via a login/?reason=failure&NTLM= URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free