| Package | Affected versions | Patched versions |
|---|---|---|
| pligg cms | = 1.0.0= 1.0.1= 9.5= 9.9= 9.9.0= 9.9.5≤ 1.0.2 |
Multiple open redirect vulnerabilities in Pligg 1.0.2 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the (1) return parameter to pligg/login.php and the (2) HTTP Referer header to user_settings.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free