| Package | Affected versions | Patched versions |
|---|---|---|
| magicpin | = 3.4 |
An XML external entity (XXE) injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free