| Package | Affected versions | Patched versions |
|---|---|---|
| erxes | < 0.22.3 | 0.22.3 |
| erxes | ≤ 1.0.1 |
Erxes, an experience operating system (XOS) with a set of plugins, is vulnerable to cross-site scripting in all versions. This results in client-side code execution. The victim must follow a malicious link or be redirected there from malicious web site. There are no known patches.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free