| Package | Affected versions | Patched versions |
|---|---|---|
| boxbilling | = 4.19= 4.19.1= 4.20= 4.21 |
Cross Site Scripting (XSS) vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbitrary code via the message field on the submit new ticket form.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free