Description
A cross-site scripting (XSS) vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access and remote code execution. This vulnerability has been fully addressed in FileMaker Server 22.0.4 and FileMaker Server 21.1.7.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Claris | FileMaker Server | unspecified – < 22.0.4, unspecified – < 21.1.7 | 22.0.4 |