| Package | Affected versions | Patched versions |
|---|---|---|
| joyplus-cms | = 1.6.0 |
joyplus-cms 1.6.0 has CSRF, as demonstrated by adding an administrator account via a manager/admin_ajax.php?action=save&tab={pre}manager request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free