| Package | Affected versions | Patched versions |
|---|---|---|
| civicrm | = 5.59 |
Stored Cross Site Scripting (XSS) vulnerability in the add contact function CiviCRM 5.59.alpha1, allows attackers to execute arbitrary code in first/second name field.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free