| Package | Affected versions | Patched versions |
|---|---|---|
| phpbb/phpbb | ≥ 3.2.7, < 3.2.8 | 3.2.8 |
| phpbb | = 3.2.7 |
Missing form token validation in phpBB 3.2.7 allows CSRF in deleting post attachments.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free