| Package | Affected versions | Patched versions |
|---|---|---|
| jcms | = 10.0.2 |
jcore/portal/ajaxPortal.jsp in Jalios JCMS 10.0.2 build-20200224104759 allows XSS via the types parameter. Note: It is asserted that this vulnerability is not present in the standard installation of Jalios JCMS
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free