| Package | Affected versions | Patched versions |
|---|---|---|
| xperiencentral | ≥ 10.29.1, ≤ 10.33.0 |
Interactive Forms (IAF) in GX Software XperienCentral versions 10.29.1 until 10.33.0 was vulnerable to cross site scripting attacks (XSS) because the CSP header uses eval() in the script-src.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free