| Package | Affected versions | Patched versions |
|---|---|---|
| easycms | = 1.5 |
App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS via the uploadifyID or movieName parameter, a related issue to CVE-2018-9173.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free