| Package | Affected versions | Patched versions |
|---|---|---|
| simplece | ≤ 2.3.0 |
In SimpleCE 2.3.0, a CSRF vulnerability can be exploited to add an administrator account (via the index.php/user/new URI) or change its settings (via the index.php/user/1 URI), including its password.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free