| Package | Affected versions | Patched versions |
|---|---|---|
| gleez/cms | ≤ 1.3.0 | |
| gleezcms | = 1.3.0 |
Gleezcms Gleez Cms version 1.3.0 contains a Cross Site Scripting (XSS) vulnerability in Profile page that can result in injection of arbitrary web script or HTML via the profile page editor. The victim must navigate to the attacker's profile page to exploit this vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free