| Package | Affected versions | Patched versions |
|---|---|---|
| matrix | = 5.4.0.0= 5.4.0.1= 5.4.0.2= 5.4.0.3= 5.4.1.0= 5.4.1.1= 5.4.1.2≤ 5.3.6.0 |
An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. Authenticated users with permissions to edit design assets can cause Remote Code Execution (RCE) via a maliciously crafted time_format tag.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free