| Package | Affected versions | Patched versions |
|---|---|---|
| cms updater | = 7.x-1.0= 7.x-1.1= 7.x-1.2 |
The CMS Updater module 7.x-1.x before 7.x-1.3 for Drupal does not properly check access permissions, which allows remote authenticated users to access and change settings by leveraging the "access administration pages" permission.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free