| Package | Affected versions | Patched versions |
|---|---|---|
| u-office force | ≤ 20.50.7821d |
U-Office Force UserDefault page has insufficient filtering for special characters in the HTTP header fields. A remote attacker with general user privilege can exploit this vulnerability to inject JavaScript and perform XSS (Stored Cross-Site Scripting) attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free