< 4.2.1
4.2.1
Former before 4.2.1 has XSS via a checkbox value.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.