| Package | Affected versions | Patched versions |
|---|---|---|
| znuny | ≥ 6.0.0, < 6.1.0≥ 6.5.1, ≤ 6.5.10≥ 7.0.1, ≤ 7.0.16 | 6.1.0 |
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free