| Package | Affected versions | Patched versions |
|---|---|---|
| beehive forum | = 1.5.2 |
Beehive Forum 1.5.2 contains a host header injection vulnerability in the forgot password functionality that allows attackers to manipulate password reset requests. Attackers can inject a malicious host header to intercept password reset tokens and change victim account passwords without direct authentication.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free