| Package | Affected versions | Patched versions |
|---|---|---|
| xunruicms | = 4.7.1 |
A stored Cross-Site Scripting (XSS) vulnerability has been discovered in XunRuiCMS version 4.7.1. The vulnerability exists due to insufficient validation of SVG file uploads in the dayrui/Fcms/Library/Upload.php component, allowing attackers to inject malicious JavaScript code that executes when the uploaded file is viewed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free