| Package | Affected versions | Patched versions |
|---|---|---|
| pivotx | = 2.3.11 |
PivotX 2.3.11 allows remote authenticated Advanced users to execute arbitrary PHP code by performing an upload with a safe file extension (such as .jpg) and then invoking the duplicate function to change to the .php extension.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free