| Package | Affected versions | Patched versions |
|---|---|---|
| pivotx | = 2.3.11 |
The smarty_self function in modules/module_smarty.php in PivotX 2.3.11 mishandles the URI, allowing XSS via vectors involving quotes in the self Smarty tag.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free