| Package | Affected versions | Patched versions |
|---|---|---|
| limesurvey | ≤ 6.6.1\+240806 |
A Host header injection vulnerability in the password reset function of LimeSurvey v.6.6.1+240806 and before allows attackers to send users a crafted password reset link that will direct victims to a malicious domain.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free