| Package | Affected versions | Patched versions |
|---|---|---|
| navigate cms | = 2.8.7 |
Navigate CMS 2.8.7 contains a cross-site request forgery vulnerability that allows attackers to upload malicious extensions through a crafted HTML page. Attackers can trick authenticated administrators into executing arbitrary file uploads by leveraging the extension upload functionality without additional validation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free