| Package | Affected versions | Patched versions |
|---|---|---|
| froxlor/froxlor | = 0.10.16 | |
| froxlor | = 0.10.16 |
Multiple cross-site scripting (XSS) vulnerabilities in the Customer Add module of Foxlor v0.10.16 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the name, firstname, or username input fields.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free