| Package | Affected versions | Patched versions |
|---|---|---|
| mailform | ≥ 1.1.0, < 1.1.9 | 1.1.9 |
MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free