| Package | Affected versions | Patched versions |
|---|---|---|
| arab portal | = 2.0.1_stable |
Multiple cross-site scripting (XSS) vulnerabilities in Arab Portal 2.0.1 stable allow remote attackers to inject arbitrary web script or HTML via the (1) adminJump and (2) forum_middle parameters in (a) forum.php, and the (3) form parameter in (b) members.php, (c) pm.php, and (d) mail.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free