| Package | Affected versions | Patched versions |
|---|---|---|
| z-blogphp | ≤ 1.7.2 |
A security issue was discovered in Z-BlogPHP <= 1.7.2. A Server-Side Request Forgery (SSRF) vulnerability in the zb_users/plugin/UEditor/php/action_crawler.php file allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the source parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free