tocsin

Debian/ejabberd: unknown

Cross-site scripting (XSS) vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs.

Action: Upgrade ejabberd to 2.0.5-1 or later.

Affected

introducedfixedlast affected
02.0.5-1-

Fixed versions

2.0.5-1

Sources

published · modified · JSON