| Package | Affected versions | Patched versions |
|---|---|---|
| project-nexus | = 1.0.1 |
Project-nexus is a general-purpose blog website framework. Affected versions are subject to SQL injection due to a lack of sensitization of user input. This issue has not yet been patched. Users are advised to restrict user input and to upgrade when a new release becomes available.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free