| Package | Affected versions | Patched versions |
|---|---|---|
| growi | ≤ 4.2.2 |
Stored cross-site scripting vulnerability due to inadequate CSP (Content Security Policy) configuration in GROWI versions v4.2.2 and earlier allows remote authenticated attackers to inject an arbitrary script via a specially crafted content.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free