| Package | Affected versions | Patched versions |
|---|---|---|
| likeshop | < 2.5.7 | 2.5.7 |
Server Side Request Forgery (SSRF) vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive information via the avatar parameter in function UserLogic::updateWechatInfo.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free