| Package | Affected versions | Patched versions |
|---|---|---|
| opms | = 1.3 |
A cross-site request forgery (CSRF) in OPMS v1.3 and below allows attackers to arbitrarily add a user account via /user/add.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free