| Package | Affected versions | Patched versions |
|---|---|---|
| vacation rental management platform | < 1.0.2 | 1.0.2 |
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 does not properly invalidate active user sessions after a password change. This allows an attacker with a valid session token to maintain access to the account even after the legitimate user changes their password.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free