We have found an XSS problem that affects Askit 1.8.0 - 1.9.6. It was not reported to be used in real-world attacks.
Yet for the quickest resolution, we would request you to act as soon as possible.
What we'll do right now is we will help you to fix it. So you can either:
- Disable the module if you don't use it but have it installed. Please run command:
bin/magento module:disable Swissup_Askit Swissup_GdprAskit - Update AskIt to the recent 1.10.0 release.
bin/magento marketplace:package:update swissup/askit - Apply a patch. You can download it from your Argento or Swissuplabs account.
Please contact our support at Argento or SwissUpLabs in case you need help with applying this patch.
