| Package | Affected versions | Patched versions |
|---|---|---|
| sowa opac | ≥ 4.0, < 4.9.10≥ 5.0, < 6.2.12 | 4.9.106.2.12 |
Improper Neutralization of Input During Web Page Generation vulnerability in SOKRATES-software SOWA OPAC allows a Reflected Cross-Site Scripting (XSS). An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser. This issue affects SOWA OPAC software in versions from 4.0 before 4.9.10, from 5.0 before 6.2.12.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free