| Package | Affected versions | Patched versions |
|---|---|---|
| erpnext | = 13.0.0≥ 13.0.1, < 13.30.0 | 13.30.0 |
In ERPNext, versions v13.0.0-beta.13 through v13.30.0 are vulnerable to Stored XSS at the Patient History page which allows a low privilege user to conduct an account takeover attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free