| Package | Affected versions | Patched versions |
|---|---|---|
| bitrix site manager | = 4.0.0= 4.0.2= 4.0.3= 4.0.4= 4.0.5= 4.0.6= 4.0.7= 4.0.8= 4.1.0 |
Bitrix Site Manager 4.1.x allows remote attackers to redirect users to other websites via a modified back_url during a HTTP POST request. NOTE: this issue has been referred to as "cross-site scripting," but that is inconsistent with the common use of the term.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free