| Package | Affected versions | Patched versions |
|---|---|---|
| a-form | = 2.0.2≤ 1.3.5 | |
| a-form bamboo | = 1.3.5= 2.0.2 | |
| a-form pc | ≤ 3.0 | |
| a-form pc mobile | ≤ 3.0 |
The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to modify data via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free