| Package | Affected versions | Patched versions |
|---|---|---|
| adportal | = 3.0.39 |
Server-Side Template Injection (SSTI) was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free