| Package | Affected versions | Patched versions |
|---|---|---|
| crafter cms | ≥ 3.1.0, < 3.1.12 | 3.1.12 |
Authenticated users with Site roles may inject XSS scripts via file names that will execute in the browser for this and other users of the same site.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free