| Package | Affected versions | Patched versions |
|---|---|---|
| growi | < 4.2.8 | 4.2.8 |
GROWI v4.2.7 and earlier contains a cross-site scripting vulnerability in the page alert function. If a user accesses a crafted URL while logged in to the affected product, an arbitrary script may be executed on the user's web browser.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free