| Package | Affected versions | Patched versions |
|---|---|---|
| bagecms | = 3.1.3 |
In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can be used to upload arbitrary files and get server privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free