| Package | Affected versions | Patched versions |
|---|---|---|
| vanilla forums | < 2.0.10 | 2.0.10 |
It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitrary code to execute on the client side.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free