| Package | Affected versions | Patched versions |
|---|---|---|
| ferretcms | = 1.0.4 |
Multiple cross-site scripting (XSS) vulnerabilities in admin.php in ferretCMS 1.0.4-alpha allow remote attackers to inject arbitrary web script or HTML via the (1) action parameter in a search request, (2) username in a login request, which is not properly handled when logging the event, or (3) page title in an insert action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free