| Package | Affected versions | Patched versions |
|---|---|---|
| formmanager data handler | = 0.7.4 |
Prototype pollution in allpro form-manager 0.7.4 allows attackers to run arbitrary code and cause other impacts via the functions setDefaults, mergeBranch, and Object.setObjectValue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free