| Package | Affected versions | Patched versions |
|---|---|---|
| pluck | ≤ 4.7.4 |
An issue was discovered in Pluck through 4.7.4. A stored cross-site scripting (XSS) vulnerability allows remote unauthenticated users to inject arbitrary web script or HTML into admin/blog Reaction Comments via a crafted URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free