| Package | Affected versions | Patched versions |
|---|---|---|
| php-nuke | = 5.0= 5.0.1= 5.1= 5.2= 5.2a= 5.3.1= 5.4= 5.5= 5.6= 6.0 |
Cross-site scripting (XSS) vulnerability in the Your_Account module for PHP-Nuke 5.0 through 6.0 allows remote attackers to inject arbitrary web script or HTML via the user_avatar parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free