| Package | Affected versions | Patched versions |
|---|---|---|
| ejbca | = 7.9.0.2 |
PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A user with the RA Administrator role can inject an XSS payload to target higher-privilege users.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free