| Package | Affected versions | Patched versions |
|---|---|---|
| lastpass | < 4.33.0 | 4.33.0 |
LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because do_popupregister can be bypassed via clickjacking.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free