| Package | Affected versions | Patched versions |
|---|---|---|
| syspass | ≥ 3.2.0, ≤ 3.2.11 |
A stored cross-site scripting (XSS) vulnerability in SysPass 3.2.x allows a malicious user with elevated privileges to execute arbitrary Javascript code by specifying a malicious XSS payload as a notification type or notification component.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free