| Package | Affected versions | Patched versions |
|---|---|---|
| exponent cms | ≥ 2.6.0, < 2.7.0 | 2.7.0 |
SQL Injection vulnerability in Exponent-CMS v.2.6.0 fixed in 2.7.0 allows attackers to gain access to sensitive information via the selectValue function in the expConfig class.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free