| Package | Affected versions | Patched versions |
|---|---|---|
| gallery | < 1.3.1 | 1.3.1 |
Cross-site request forgery (CSRF) vulnerability in Invision Gallery before 1.3.1 allows remote attackers to delete albums and images as another user via a link or IMG tag to the (1) albums or (2) delimg actions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free