| Package | Affected versions | Patched versions |
|---|---|---|
| bigtree cms | ≤ 4.2.18 |
CSRF exists in BigTree CMS through 4.2.18 with the force parameter to /admin/pages/revisions.php - for example: /admin/pages/revisions/1/?force=false. A page with id=1 can be unlocked.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free