| Package | Affected versions | Patched versions |
|---|---|---|
| u5cms | ≤ 3.9.3 |
Multiple open redirect vulnerabilities in u5CMS before 3.9.4 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) pidvesa cookie to u5admin/pidvesa.php or (2) uri parameter to u5admin/meta2.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free