| Package | Affected versions | Patched versions |
|---|---|---|
| smartlist | ≤ 3.15 |
The confirm add-on in SmartList 3.15 and earlier allows attackers to subscribe arbitrary e-mail addresses by using a valid cookie that specifies an address other than the address for which the cookie was assigned.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free