| Package | Affected versions | Patched versions |
|---|---|---|
| klik socialmediawebsite | = 1.0.1 |
KLiK SocialMediaWebsite version 1.0.1 from msaad1999 has a reflected cross-site scripting (XSS) vulnerability which may allow remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'selector' or 'validator' parameters of 'create-new-pwd.php'.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free