| Package | Affected versions | Patched versions |
|---|---|---|
| ofbiz | = 11.04.01= 11.04.02= 11.04.03= 11.04.04= 12.04.01= 12.04.02= 12.04.03 |
Multiple cross-site scripting (XSS) vulnerabilities in framework/common/webcommon/includes/messages.ftl in Apache OFBiz 11.04.01 before 11.04.05 and 12.04.01 before 12.04.04 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, which are not properly handled in a (1) result or (2) error message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free