| Package | Affected versions | Patched versions |
|---|---|---|
| remark42 | < 1.6.1 | 1.6.1 |
remark42 before 1.6.1 allows XSS, as demonstrated by "Locator: Locator{URL:" followed by an XSS payload. This is related to backend/app/store/comment.go and backend/app/store/service/service.go.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free