| Package | Affected versions | Patched versions |
|---|---|---|
| ipn pro 3 | ≤ 1.44 |
Cross-site request forgery (CSRF) vulnerability in admin/settings.php in IPN Pro 3 1.44 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the admin_id, newpass_1, and newpass_2 parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free