| Package | Affected versions | Patched versions |
|---|---|---|
| b2evolution | ≤ 6.7.8 |
The "lost password" functionality in b2evolution before 6.7.9 allows remote attackers to reset arbitrary user passwords via a crafted request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free