| Package | Affected versions | Patched versions |
|---|---|---|
| commsy | ≤ 8.6.5 |
CommSy through 8.6.5 has SQL Injection via the cid parameter. This is fixed in 9.2.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free