| Package | Affected versions | Patched versions |
|---|---|---|
| zendto | = 4.00= 4.01= 4.02= 4.03-3= 4.05-2= 4.06-2= 4.07-1= 4.08-4= 4.09-1= 4.10-4= 4.10-5= 4.11-1= 4.11-10= 4.11-11= 4.11-2= 4.11-3= 4.11-4= 4.11-5= 4.11-7= 4.11-8= 4.11-9≤ 4.11-12 |
Cross-site scripting (XSS) vulnerability in lib/NSSDropoff.php in ZendTo before 4.11-13 allows remote attackers to inject arbitrary web script or HTML via a modified emailAddr field to pickup.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free