| Package | Affected versions | Patched versions |
|---|---|---|
| prestashop/contactform | ≥ 1.0.1, < 4.3.0 | 4.3.0 |
| contactform | < 4.3.0 | 4.3.0 |
An attacker is able to inject javascript while using the contact form.
The problem is fixed in v4.3.0
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free