| Package | Affected versions | Patched versions |
|---|---|---|
| geminabox | < 0.13.10 | 0.13.10 |
| geminabox | < 0.13.10 | 0.13.10 |
Stored cross-site scripting (XSS) vulnerability in "geminabox" (Gem in a Box) before 0.13.10 allows attackers to inject arbitrary web script via the "homepage" value of a ".gemspec" file, related to views/gem.erb and views/index.erb.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free