| Package | Affected versions | Patched versions |
|---|---|---|
| m-server | < 1.4.2 | 1.4.2 |
| m-server | < 1.4.2 | 1.4.2 |
Versions of m-server before 1.4.2 are vulnerable to stored cross-site scripting. This vulnerability is exploitable if an attacker is able to control the name of a file that m-server is serving.
Update to version 1.4.2 or later.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free