| Package | Affected versions | Patched versions |
|---|---|---|
| laravel file manager | = 3.3.1 |
alexusmai laravel-file-manager 3.3.1 is vulnerable to Cross Site Scripting (XSS). The application permits user-controlled upload, create, and rename of files to HTML and SVG types and serves those files inline without adequate content-type validation or output sanitization.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free