| Package | Affected versions | Patched versions |
|---|---|---|
| civicrm | < 5.27.5< 5.28.1 | 5.27.55.28.1 |
In CiviCRM before 5.28.1 and CiviCRM ESR before 5.27.5 ESR, the CKEditor configuration form allows CSRF.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free