| Package | Affected versions | Patched versions |
|---|---|---|
| joomla! | ≥ 3.0.0, < 5.4.6≥ 6.0.0, < 6.1.1 | 5.4.66.1.1 |
The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free