| Package | Affected versions | Patched versions |
|---|---|---|
| commons | = 7.x-3.x≤ 7.x-3.0 | |
| commons wikis | = 7.x-3.x≤ 7.x-3.0 |
The Commons Wikis module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content to groups via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free