| Package | Affected versions | Patched versions |
|---|---|---|
| eramba | = 2.19.3= 2.8.1 |
eramba c2.8.1 and Enterprise before e2.19.3 allows XSS via a crafted filename for a file attached to an object. For example, the filename has a complete XSS payload followed by the .png extension.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free