| Package | Affected versions | Patched versions |
|---|---|---|
| kantorge/yaffa | ≤ 2.0.0 | |
| yaffa | = 2.0.0 |
yaffa v2.0.0 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript into the "Add Account Group" function on the account-group page, allowing execution of arbitrary script in the context of users who view the affected page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free