| Package | Affected versions | Patched versions |
|---|---|---|
| arunna | = 1.0.0 |
Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users into submitting the form.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free