| Package | Affected versions | Patched versions |
|---|---|---|
| workspace one boxer | < 22.02 | 22.02 |
VMware Workspace ONE Boxer contains a stored cross-site scripting (XSS) vulnerability. Due to insufficient sanitization and validation, in VMware Workspace ONE Boxer calendar event descriptions, a malicious actor can inject script tags to execute arbitrary script within a user's window.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free