| Package | Affected versions | Patched versions |
|---|---|---|
| yeager cms | = 1.2.1 |
SQL injection vulnerability in the password recovery feature in Yeager CMS 1.2.1 allows remote attackers to change the account credentials of known users via the "userEmail" parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free