| Package | Affected versions | Patched versions |
|---|---|---|
| xbtit | ≤ 2.5.4 |
An issue was discovered in BTITeam XBTIT. Due to a lack of cross-site request forgery protection, it is possible to automate the action of sending private messages to users by luring an authenticated user to a web page that automatically submits a form on their behalf.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free