| Package | Affected versions | Patched versions |
|---|---|---|
| simpnews | = 2.41.03 |
Multiple cross-site scripting (XSS) vulnerabilities in SimpNews 2.41.03 allow remote attackers to inject arbitrary web script or HTML via the (1) l_username parameter to admin/layout2b.php, and the (2) backurl parameter to comment.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free