| Package | Affected versions | Patched versions |
|---|---|---|
| squaredup | < 4.6 | 4.6 |
SquaredUp allowed Stored XSS before version 4.6.0. A user was able to create a dashboard that executed malicious content in iframe or by uploading an SVG that contained a script.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free