| Package | Affected versions | Patched versions |
|---|---|---|
| nopcommerce | = 4.20 |
RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to CSRF because GET requests can be used for renames and deletions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free