| Package | Affected versions | Patched versions |
|---|---|---|
| mailform | ≥ 1.1.0, < 1.1.9 | 1.1.9 |
Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free