| Package | Affected versions | Patched versions |
|---|---|---|
| self service password | < 1.5.4 | 1.5.4 |
An issue in LTB Self Service Password before v.1.5.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via hijack of the SMS verification code function to arbitrary phone.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free