| Package | Affected versions | Patched versions |
|---|---|---|
| leed | ≤ 1.4 |
Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to bypass authorization via vectors related to the (1) importForm, (2) importFeed, (3) addFavorite, or (4) removeFavorite actions in action.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free