| Package | Affected versions | Patched versions |
|---|---|---|
| cerb | ≤ 7.0.3 |
Cross-site request forgery (CSRF) vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a saveWorkerPeek action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free