| Package | Affected versions | Patched versions |
|---|---|---|
| typesetter | ≥ 5.0, ≤ 5.1 |
Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archive. NOTE: the vendor disputes the significance of this report because "admins are considered trustworthy"; however, the behavior "contradicts our security policy" and is being fixed for 5.2
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free