| Package | Affected versions | Patched versions |
|---|---|---|
| icecoder/icecoder | < 8.1 | 8.1 |
| icecoder | = 8.0 |
In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the _GET['replace'] variable. As a result, arbitrary Javascript code can get executed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free