| Package | Affected versions | Patched versions |
|---|---|---|
| identityserver4.admin | < 2.0.0 | 2.0.0 |
A cross-site scripting (XSS) vulnerability in Skoruba IdentityServer4.Admin before 2.0.0 via unencoded value passed to the data-secret-value parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free