| Package | Affected versions | Patched versions |
|---|---|---|
| projectsend | < r1295 | r1295 |
reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect business logic. Errors are not properly considered (an invalid token parameter).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free