| Package | Affected versions | Patched versions |
|---|---|---|
| tooljet | ≥ 0.6.0, ≤ 1.10.2 |
ToolJet versions v0.6.0 to v1.10.2 are vulnerable to HTML injection where an attacker can inject malicious code inside the first name and last name field while inviting a new user which will be reflected in the invitational e-mail.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free