| Package | Affected versions | Patched versions |
|---|---|---|
| streaming engine | ≥ 4.3.0, < 4.9.1 | 4.9.1 |
Stored Cross-Site Scripting in the Manager component of Wowza Streaming Engine below 4.9.1 allows an unauthenticated attacker to inject client-side JavaScript into the web dashboard to automatically hijack admin accounts.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free