| Package | Affected versions | Patched versions |
|---|---|---|
| ledgersmb | ≥ 1.1.0, ≤ 1.1.12≥ 1.2.0, ≤ 1.2.26≥ 1.3.0, ≤ 1.3.47≥ 1.4.0, ≤ 1.4.42≥ 1.5.0, ≤ 1.5.30≥ 1.6.0, ≤ 1.6.33≥ 1.7.0, ≤ 1.7.32≥ 1.8.0, ≤ 1.8.17 |
LedgerSMB does not sufficiently guard against being wrapped by other sites, making it vulnerable to 'clickjacking'. This allows an attacker to trick a targetted user to execute unintended actions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free