| Package | Affected versions | Patched versions |
|---|---|---|
| webapp | ≤ 0.9.9.6 |
The displaypost function in cgi-bin/cgi-lib/forum_display.pl in web-app.org WebAPP before 0.9.9.7 does not display usernames in conjunction with real names, which makes it easier for remote authenticated users to impersonate other users.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free