description: node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)
problem types: in the Sencha Labs Connect middleware
affected:
{
product: node-connect
vendor: node-connect
versions:
status: affected, version: < 2.8.2
}