| Package | Affected versions | Patched versions |
|---|---|---|
| ad phonebook | < 4.0.1.1 | 4.0.1.1 |
Dovestones Softwares ADPhonebook <4.0.1.1 has a reflected cross-site scripting (XSS) vulnerability in the search parameter of the /ADPhonebook?Department=HR endpoint. User-supplied input is reflected in the HTTP response without proper input validation or output encoding, allowing execution of arbitrary JavaScript in the victim's browser.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free