| Package | Affected versions | Patched versions |
|---|---|---|
| chatroom module | ≤ 4.7 |
The Chatroom Module before 4.7.x.-1.0 for Drupal broadcasts Chatroom visitors' session IDs to all participants, which allows remote attackers to hijack sessions and gain privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free