| Package | Affected versions | Patched versions |
|---|---|---|
| xoops | = 2.5.10 |
An issue was discovered in the image-manager in Xoops 2.5.10. When any image with a JavaScript payload as its name is hovered over in the list or in the Edit page, the payload executes.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free