| Package | Affected versions | Patched versions |
|---|---|---|
| formmail | ≤ 1.92 |
Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via javascript: URIs in the (1) request and (2) return_link_url parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free