Practical Security Guides For Your Team

Your website uses an outdated version of a popular form validation tool (jQuery Validation) that has a known security flaw. An attacker who can influence the text shown in form error messages could inject malicious code that runs in your visitors' browsers. This is a medium-severity issue — it requires a specific set of conditions to exploit, but the fix is straightforward.

Your website uses an outdated version of React (a popular tool for building web pages) that has a known security flaw. If your site generates pages on the server and allows user input to influence how those pages are built, an attacker could inject malicious code that runs in your visitors' browsers. This only affects server-rendered React apps — if your site is purely client-side, you are not at risk.